04:17
2026-07-14
dev.to
ai-safety
The MCP Confused Deputy: Provenance Gaps, Instruction Injection, and DNS Rebinding in the Model Context Protocol
A developer identified a 'confused deputy' vulnerability in the Model Context Protocol (MCP), where the protocol fails to provide cryptographically attestable provenance for tool results, enabling ins…