← Back to feed

AI coding agents are installing abandoned MCP servers with known security issues

AI · Security · 2026-11-04 10:58

Glow Labs研究发现,AI编程代理会自行决定安装已停止维护的MCP服务器,其中部分存在高危漏洞,且不再获得安全更新,该现象被命名为MCPhantom。

Source: www.glow.io


Auto-generated summary for reference only. RSS