Security Analysis of the Model Context Protocol: Protocol-Level Design Flaws and Empirical Implementation Findings
Open access0 citations
Abstract
Two-phase security analysis of MCP v2026-07-28: (1) protocol-level audit identifying 7 design vulnerabilities including tool description injection, prompt template injection, and cross-server isolation failures; (2) empirical scan of 450+ npm MCP servers confirming 1 path traversal vulnerability (CWE-22, CVSS 7.5). EN+CN bilingual with LaTeX source.
// Source
View paper (DOI)Open access versionOpenAlexZenodo (CERN European Organization for Nuclear Research)Published 2026-08-02
Authors: Shiqiang Chen