Record · corpus.blog/posts/01a08773-056f-730d-b534-e6a58713ffbb

MCP: Untrusted Servers and Confused Clients, Plus a Sneaky Exploit

embracethered.com · published 2 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at embracethered.com Wayback capture

1blogs citing

First cited: 9 May 2025
Most recent: 9 May 2025
Rank this month: not ranked
Links from this post: 23
Words captured: 2,627

Cited by

Blog

In the post

Date

Shellsharks

Scroll quīndecim Read at the source ↗

9 May 2025

Links from this post

Link

Host

https://embracethered.com/blog/images/2025/heyyou-pi.jpg

embracethered.com

https://arxiv.org/pdf/2503.23278

arxiv.org

https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-attacks

invariantlabs.ai

ChatGPT Plugins: Data Exfiltration via Images & Cross Plugin Request Forgery Read at the source ↗

embracethered.com

https://embracethered.com/blog/images/2025/claude-desktop-mcp-server-trace-annotated.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-tools-list-system-prompt-extraction.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-mcp-prompt-injection-override.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-desktop-config.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-tool-prompt-injection.gif

embracethered.com

https://embracethered.com/blog/images/2025/claude-prompt-inject-before-tool-call.png

embracethered.com

Hidden Prompt Injections with Anthropic Claude Read at the source ↗

embracethered.com

https://embracethered.com/blog/images/2025/claude-tool-ascii-smuggle1.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-tool-ascii-smuggle3.png

embracethered.com

https://embracethered.com/blog/images/2025/claude-tool-ascii-smuggle4.png

embracethered.com

https://embracethered.com/blog/images/2025/github-copilot-always-allow.jpg

embracethered.com

https://embracethered.com/blog/images/2025/claude-mcp-what-is1+1.png

embracethered.com

https://embracethered.com/blog/images/2025/github-copilot-mcp-what-is-1+1.png

embracethered.com

https://embracethered.com/blog/images/2025/cursor-what_is1+1.png

embracethered.com

https://embracethered.com/blog/images/2025/chatgpt-tool-invocation-metadata.png

embracethered.com

https://modelcontextprotocol.io/docs/concepts/architecture

modelcontextprotocol.io

https://x.com/sasi2103/status/1915366925053349932

x.com

https://embracethered.com/blog/images/2025/claude-tool-call-hidden-demo.gif

embracethered.com

https://arxiv.org/pdf/2412.06090

arxiv.org