New Prompt Injection Attack via Malicious MCP Servers Let Attackers Drain Resources

Security researchers have uncovered critical vulnerabilities in the Model Context Protocol (MCP) sampling feature. Revealing how malicious servers can exploit LLM-integrated applications to conduct resource theft, conversation hijacking, and unauthorized system modifications. Attack Vector Mechanism Impact Resource theft Hidden instructions in sampling requests make the LLM generate extra, non-visible content. Drains AI compute quotas and […]

The post New Prompt Injection Attack via Malicious MCP Servers Let Attackers Drain Resources appeared first on Cyber Security News.