Shiqiang Chen

Security Analysis of the Model Context Protocol: Protocol-Level Design Flaws and Empirical Implementation Findings

Two-phase security analysis of MCP v2026-07-28: (1) protocol-level audit identifying 7 design vulnerabilities including tool description injection, prompt template injection, and cross-server isolation failures; (2) empirical scan of 450+ npm MCP servers confirming 1 path travers...