ATR-2026-00095criticalTool Poisoningdraft
MCP Tool Supply Chain Poisoning
Detects tool poisoning attacks targeting the MCP (Model Context Protocol) skill/tool supply chain. Attackers inject malicious payloads into tool descriptions, return values, or schemas that are consumed by agents, causing unintended code execution, data exfiltration, or privilege escalation when the poisoned tool is invoked.
嚴重度
critical
類別
Tool Poisoning
掃描目標
mcp
作者
ATR Community (MiroFish Predicted)
建議回應
block inputquarantine sessionalertescalatekill agent
參考資料
MITRE ATLAS
AML.T0053