MCP Configuration Poisoning

Named by 2 kept items in this workspace.

Search every workspace for MCP Configuration Poisoning. It matches the name as written, so it can find other things that share it.

The items that name it 2

[tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs
article2026-09-08
Malicious commands in mcp.json that AI tools execute automatically; demonstrated by Checkmarx's Bruno Dias against Snyk Agent Scan.
MCP Configuration Poisoning: Owning Your Machine With Just A Text File
writeup2026-07-23
Attacker introduces or modifies mcp.json configuration files to manipulate execution flow, hijack permissions, or establish hidden persistence when a trusted tool automatically loads and executes the file

All techniques in this workspace.