{
  "id": 17925886,
  "title": "MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study",
  "url": "https://urgent.news/2026/11/02/mcp-tool-poisoning-in-agentic-ai-frameworks-a-cross-framework",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-02T18:17:08.000Z",
  "source": {
    "name": "arXiv cs.AI",
    "slug": "arxiv-cs-ai",
    "url": "https://arxiv.org/abs/2611.03555v1"
  },
  "original_language": "en",
  "account": null,
  "summary": "The Model Context Protocol (MCP) lets agentic AI frameworks connect language models to external tool providers, but it carries attacker-controlled content (tool descriptions, schema fields, and response data) into model context without validation. Prior benchmarks measure model compliance with poisoned instructions without confirming real execution. We present the first cross-framework…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}