02:08
2026-07-25
dev.to
ai-safety
MCP rug-pulls: how a "safe" AI tool turns malicious after you approve it
A developer warns that MCP (Model Context Protocol) tools can be silently mutated after user approval, enabling attacks like tool poisoning and prompt injection via tool output. The vulnerability, tra…