Skip to content
How MCP servers can steal your conversation history
blog.trailofbits.com | blog | #mcp | #prompt-injection | #llm-security | #ai-agents | #data-exfiltration | #trail-of-bits
Summary
Malicious MCP servers can inject trigger phrases into tool descriptions to exfiltrate entire conversation histories and steal sensitive credentials and IP.
- Published
- Collected