CVE-2025-6515 Prompt Hijacking Attack – How Session Hijacking Affects MCP Ecosystems

CVE

CVE-2025-6515

Published

2025-10-21 13:15

Collected

2026-08-22 00:35

---
id: 6676
title: "CVE-2025-6515 Prompt Hijacking Attack – How Session Hijacking Affects MCP Ecosystems"
cve: CVE-2025-6515
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/mcp-prompt-hijacking-vulnerability/"
published_at: "2025-10-21T13:15:14Z"
tags: ["ai-security", "mcp", "cve", "jfrog", "session-hijacking", "cve-2025-6515", "prompt-hijacking", "jfrog-com"]
phying_url: "https://phying.com/item/6676"
lang: en
---

# CVE-2025-6515 Prompt Hijacking Attack – How Session Hijacking Affects MCP Ecosystems

## Summary

JFrog details 'Prompt Hijacking' (CVE-2025-6515) in oatpp-mcp: hijacking MCP session IDs lets attackers inject prompts into other users' sessions, a threat pattern spanning the MCP ecosystem.

## Intelligence Metadata

- **Sources:** jfrog.com
- **CVE:** CVE-2025-6515
- **Published:** 2025-10-21T13:15:14Z
- **Original:** https://jfrog.com/blog/mcp-prompt-hijacking-vulnerability/
- **Phying News:** https://phying.com/item/6676