4 ms·
Remote MCP servers can do prompt injection that instruct your local agent to do something else other than only the expected tool call. https://embracethered.com
by Too 1y ago
Remote MCP servers can do prompt injection that instruct your local agent to do something else other than only the expected tool call. https://embracethered.com/blog/posts/2025/model-context-protocol-security-risks-and-exploits/ https://embracethered.com/blog/posts/2025/model-context-prot...
- lyu07282 1y agoThat flaw isn't introduced by the MCP server necessarily it can already be present in the API data it returns, you will never be able to protect yourself against someone injecting a malicious prompt that calls your code eval tool to open up a reverse shell on your MacBook Pro.
- owebmaster 1y agothat's not the case, MCP has a feature, samplings, that allow MCP servers to run prompts using the client model.
- lyu07282 1y agoOh boy, you know at least the infosec people are going to get a good laugh from this clown show