Copertina

MCP Pitfall Lab: Exposing Developer Pitfalls in MCP Tool Server Security under Multi-Vector Attacks

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Hao, Run, Tan, Zhuoran
Natura:	Preprint
Pubblicazione:	2026
Soggetti:	Cryptography and Security
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools
di: Tan, Zhuoran, et al.
Pubblicazione: (2026)

MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
di: Wang, Zhiqiang, et al.
Pubblicazione: (2025)

Auditing MCP Servers for Over-Privileged Tool Capabilities
di: Huang, Charoes, et al.
Pubblicazione: (2026)

When MCP Servers Attack: Taxonomy, Feasibility, and Mitigation
di: Zhao, Weibo, et al.
Pubblicazione: (2025)

MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers
di: Wang, Bin, et al.
Pubblicazione: (2025)

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers
di: Zhou, Huijun, et al.
Pubblicazione: (2026)

MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP
di: Li, Ruiqi, et al.
Pubblicazione: (2026)

Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
di: Song, Hao, et al.
Pubblicazione: (2025)

Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data
di: Croce, Nicola, et al.
Pubblicazione: (2025)

VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers
di: Sun, Pengyu, et al.
Pubblicazione: (2026)

MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System
di: Kumar, Sonu, et al.
Pubblicazione: (2025)

Chasing Shadows: Pitfalls in LLM Security Research
di: Evertz, Jonathan, et al.
Pubblicazione: (2025)

Analysing the Safety Pitfalls of Steering Vectors
di: Li, Yuxiao, et al.
Pubblicazione: (2026)

Secure Tool Manifest and Digital Signing Solution for Verifiable MCP and LLM Pipelines
di: Jamshidi, Saeid, et al.
Pubblicazione: (2026)

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers
di: Huang, Yiheng, et al.
Pubblicazione: (2026)

Securing the Model Context Protocol (MCP): Risks, Controls, and Governance
di: Errico, Herman, et al.
Pubblicazione: (2025)

Can LLM Infer Risk Information From MCP Server System Logs?
di: Fu, Jiayi, et al.
Pubblicazione: (2025)

Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
di: Zhao, Shuli, et al.
Pubblicazione: (2025)

No More Hidden Pitfalls? Exposing Smart Contract Bad Practices with LLM-Powered Hybrid Analysis
di: Li, Xiaoqi, et al.
Pubblicazione: (2025)

Simplified and Secure MCP Gateways for Enterprise AI Integration
di: Brett, Ivo
Pubblicazione: (2025)

MCP-in-SoS: Risk assessment framework for open-source MCP servers
di: Kumar, Pratyay, et al.
Pubblicazione: (2026)

MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents
di: Zhang, Dongsen, et al.
Pubblicazione: (2025)

MCP Bridge: A Lightweight, LLM-Agnostic RESTful Proxy for Model Context Protocol Servers
di: Ahmadi, Arash, et al.
Pubblicazione: (2025)

AegisMCP: Online Graph Intrusion Detection for Tool-Augmented LLMs on Edge Devices
di: Zhan, Zhonghao, et al.
Pubblicazione: (2025)

Overthinking Loops in Agents: A Structural Risk via MCP Tools
di: Lee, Yohan, et al.
Pubblicazione: (2026)

Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions
di: Li, Zhihao, et al.
Pubblicazione: (2026)

MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits using Improved Preference Alignment
di: Halloran, John
Pubblicazione: (2025)

From Tool Orchestration to Code Execution: A Study of MCP Design Choices
di: Felendler, Yuval, et al.
Pubblicazione: (2026)

APILOT: Navigating Large Language Models to Generate Secure Code by Sidestepping Outdated API Pitfalls
di: Bai, Weiheng, et al.
Pubblicazione: (2024)

Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies
di: Narajala, Vineeth Sai, et al.
Pubblicazione: (2025)

Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
di: Hou, Xinyi, et al.
Pubblicazione: (2025)

The Pitfalls of "Security by Obscurity" And What They Mean for Transparent AI
di: Hall, Peter, et al.
Pubblicazione: (2025)

Potentials and Pitfalls of Applying Federated Learning in Hardware Assurance
di: Lee, Gijung, et al.
Pubblicazione: (2026)

SoK: An Essential Guide For Using Malware Sandboxes In Security Applications: Challenges, Pitfalls, and Lessons Learned
di: Alrawi, Omar, et al.
Pubblicazione: (2024)

"Tab, Tab, Bug": Security Pitfalls of Next Edit Suggestions in AI-Integrated IDEs
di: Lyu, Yunlong, et al.
Pubblicazione: (2026)

MCP-Guard: A Multi-Stage Defense-in-Depth Framework for Securing Model Context Protocol in Agentic AI
di: Xing, Wenpeng, et al.
Pubblicazione: (2025)

SecureMCP: A Policy-Enforced LLM Data Access Framework for AIoT Systems via Model Context Protocol
di: Kim, Wonbae, et al.
Pubblicazione: (2026)

We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems
di: Li, Zhihao, et al.
Pubblicazione: (2025)

Prompts Don't Protect: Architectural Enforcement via MCP Proxy for LLM Tool Access Control
di: Uppala, Rohith
Pubblicazione: (2026)

When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents
di: Liu, Shi, et al.
Pubblicazione: (2026)