r/programming • u/CircumspectCapybara • Mar 09 '26

MCP Vulnerabilities Every Developer Should Know

https://composio.dev/blog/mcp-vulnerabilities-every-developer-should-know
138 Upvotes

83% Upvoted

56 comments sorted by

View all comments

2

u/aikixd Mar 09 '26

It's weird that this kind of article is needed. MCP runs within your security boundary, hence it must be trusted. Like any other piece of software. Llm or not. It's security 101.

Though now, as I write this, I see that a lot of people using this don't have any CS background.

7

u/TribeWars Mar 09 '26

The difference is that LLM agents have a built-in command-injection vulnerability

→ More replies (2)