Skip to content
CVE-2025-6515 Prompt Hijacking Attack – How Session Hijacking Affects MCP Ecosystems
jfrog.com | vulnerability | CVE-2025-6515 | #ai-security | #mcp | #jfrog | #session-hijacking | #cve-2025-6515 | #prompt-hijacking
Summary
JFrog details 'Prompt Hijacking' (CVE-2025-6515) in oatpp-mcp: hijacking MCP session IDs lets attackers inject prompts into other users' sessions, a threat pattern spanning the MCP ecosystem.
- Published
- Collected