4 ms·
Not to downplay the severity of this exploit, but MCP is not the problem here. The attack works just as well if the MCP client is able to execute the GitHub CLI
by linkage 1y ago
Not to downplay the severity of this exploit, but MCP is not the problem here. The attack works just as well if the MCP client is able to execute the GitHub CLI (e.g. Cursor and VS Code). The actual attack is simply prompt injection.