TL;DR: An MCP server can change what its tools say after you approve it. Your agent reads the new description as instructions. Pattern-matching those descriptions misses things; checking "did this change since approval?" doesn't. Tool descriptions are prompts When Claude Code, Cursor or Codex connects to an MCP server, it calls tools/list and puts... Weiterlesen: Your MCP server changed last night. Your agent didn't notice.
Intelligence View
⚡ tsecurity.de Intelligence
Your MCP server changed last night. Your agent didn't notice.
TL;DR: An MCP server can change what its tools say after you approve it. Your agent reads the new description as instructions. Pattern-matching those…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
35 Quellen
CVE-2026-90129 | Linux Kernel up to 6.18.51/7.2.5 virtio_balloon virtballoon_free_page_report acked resource consumption (WID-SEC-2026-3444)
34 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-90130 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 vdpa_sim vdpasim_create null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90132 | Linux Kernel up to 7.2.5 NTFS setxattr LXUID/LXGID/LXMOD/LXDEV privileges management (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90133 | Linux Kernel up to 7.2.5 NTFS ntfs_ir_to_ib heap-based overflow (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90134 | Linux Kernel up to 7.2.5 NTFS Compression ntfs_decompress memory corruption (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90135 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Net Device Allocation alloc_netdev_mqs use after free (WID-SEC-2026-3444) VVulDB Updatesvor 5 Std.CVE-2026-90136 | Linux Kernel up to 6.18.51/7.2.5 AMD HSMP hsmp.c hsmp_hwmon_write power1_cap signed conversion (WID-SEC-2026-3444)
+28
17 Quellen
CVE-2026-96232 | Microsoft .NET/Visual Studio WPF out-of-bounds (Nessus ID 371924)
16 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-96234 | Microsoft .NET/Visual Studio up to 8.0.31/9.0.20/10.0.12/11.0.0-rc.1 WPF origin validation (Nessus ID 371924) VVulDB Updatesvor 4 Std.CVE-2026-96235 | Microsoft .NET/Visual Studio WPF CPSTrans::Initialize out-of-bounds write (Nessus ID 371924) VVulDB Updatesvor 4 Std.CVE-2026-96959 | Microsoft .NET/System.Security.Cryptography.Xml allocation of resources (Nessus ID 371924) VVulDB Updatesvor 4 Std.CVE-2026-96958 | Microsoft .NET/Visual Studio up to 10.0.12/11.0.0-rc.1/8.0.4/9.0.20 Signed XML algorithmic complexity (Nessus ID 371924) VVulDB Updatesvor 4 Std.CVE-2026-96960 | Microsoft System.Security.Cryptography.Xml amplification (Nessus ID 371924) VVulDB Updatesvor 8 Std.CVE-2026-116099 | Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295 Skynet++ Virtual Machine BlitzBanks out-of-bounds write
+10
12 Quellen
CVE-2026-78659 | Go HTTP/2 Server amplification (EUVD-2026-95419 / Nessus ID 371915)
11 weitere Quellen
VVulDB Updatesvor 10 Std.CVE-2026-116137 | cthackers adm-zip up to 0.6.1 readEntries integrity check (EUVD-2026-109389) VVulDB Updatesvor 10 Std.CVE-2026-116136 | ProjectSend up to 2.7.1 File Versions FileVersions::link improper authorization (EUVD-2026-109388) VVulDB Updatesvor 10 Std.CVE-2026-116073 | leon-ai Leon URL getModelFileNameFromURL path traversal (EUVD-2026-109387) VVulDB Updatesvor 10 Std.CVE-2026-116072 | Docile-Alligator Infinity for Reddit up to 8.3.4 LoginChromeCustomTabActivity cross-site request forgery (EUVD-2026-109386) VVulDB Updatesvor 10 Std.CVE-2026-116071 | rotki up to 1.44.1 hash predictable salt (EUVD-2026-109385) VVulDB Updatesvor 10 Std.CVE-2026-116070 | dqzboy Docker-Proxy up to 5.1.9 Hubcmd UI routes/config.js missing authentication (EUVD-2026-109384)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4213587/sichere-programmierung/your-mcp-server-changed-last-night-your-agent-didnt-notice/