MCP Tool Poisoning Flaw Lets Malicious Instructions Bypass AI Safety Filters

·1 views

A security vulnerability in the Model Context Protocol (MCP) allows attackers to embed malicious instructions directly into tool descriptions before any code executes, making them nearly invisible to content-based safety systems. A benchmark study called MCPTox, published on arXiv, tested 20 prominent AI agents against 45 live MCP servers and found an average attack success rate of 36.5% across all models. The model most susceptible was o1-mini at 72.8%, while Claude-3.7-Sonnet showed the highest refusal rate, still under 3%. Because poisoned tools operate through already-trusted channels for seemingly legitimate tasks, AI alignment mechanisms rarely flag the activity as suspicious. The MCP specification requires clients to treat tool descriptions as untrusted unless sourced from verified servers, placing enforcement responsibility squarely on client developers.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Uncensored Qwen 3.8 27B Model Released and Put to the Test

An uncensored version of the Qwen 3.8 27B language model has been made available and is undergoing testing. The model is hosted at imageat.com, a platform offering access to various AI models. The release attracted discussion on Hacker News, though engagement remained limited with only 5 points and 2 comments. Uncensored AI models remove safety filters present in standard releases, raising both interest and ethical questions among developers and researchers.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Git Rebase vs Merge and AWS RDS Snapshot Restore: Key Differences Explained

A developer training exercise on the KodeKloud Engineer platform covered two practical tasks: rebasing a feature branch onto master without a merge commit, and restoring an AWS RDS instance from a snapshot. Unlike git merge, which joins two histories and records the join, git rebase replays commits one at a time onto the new base, rewriting commit hashes and producing a clean linear history. Because history is rewritten, pushing requires the --force-with-lease flag, though its protection can be bypassed if a background process updates the remote-tracking reference before the push. The AWS portion of the exercise focused on snapshotting an RDS instance and restoring it into a new instance, exploring which configurations carry over automatically and which must be explicitly set. A key takeaway emphasized in Git documentation is that rebasing should only be done on unshared branches, as rewriting shared history forces collaborators to manually reconcile their own work.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Reverse-Skill: Open-Source Framework Brings Structure to AI-Driven Security Audits

A developer known as zhaoxuya520 has released Reverse-Skill, an open-source framework designed to improve how AI coding agents like Claude Code, Cursor, and Cline handle cybersecurity tasks. The tool acts as a deterministic skill router, guiding AI agents through verified, step-by-step workflows for tasks such as binary analysis, decompilation, and network auditing. It includes local indexing scripts that automatically detect and configure installed security tools like Ghidra, Radare2, Frida, and Nmap, eliminating the need for agents to guess command-line arguments. Reverse-Skill also maintains trajectory logs and benchmark tests to help refine the agent's knowledge base over time. The framework is compatible with major AI coding environments and is freely available on GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Dizord, a Discord Server Discovery Platform for Niche Communities

A developer has launched Dizord, a Discord server directory platform aimed at making it easier for users to find communities that match their interests. The platform organizes servers using categories and tags rather than presenting a single undifferentiated list, addressing a gap the creator noticed while navigating Discord communities. The backend is built with Laravel and integrates with the Discord API to keep server listings synchronized and up to date. A key focus of the project is improving visibility for smaller servers, so communities do not need large member counts to be discoverable. The platform is live at dizord.com and continues to evolve, with ongoing work on search, categorization, and activity-based discovery features.

0 comments Read more at DEV Community