Security researchers have identified a vulnerability in AI coding assistants using Model Context Protocol (MCP) servers, where malicious servers can exfiltrate sensitive data including SSH keys, environment variables, and source code by fragmenting harmful instructions into seemingly benign requests. This attack bypasses security controls that would block obvious data theft attempts by splitting m
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can work even after a blunt version of the same theft is refused: split the request into fragments that each look routine, place them in channels the assistant already uses, and let
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
1 min read
1 min read
1 min read