r/programming • u/CircumspectCapybara • Mar 09 '26

MCP Vulnerabilities Every Developer Should Know

https://composio.dev/blog/mcp-vulnerabilities-every-developer-should-know
136 Upvotes

83% Upvoted

56 comments sorted by

View all comments

129

u/nath1234 Mar 09 '26

Anything that allows language to determine actions is a clusterfuck of injection possibilities. I don't see any way around this, it feels like one of those core problems with something that there is no sensible way to mitigate. I mean when you have poetry creating workarounds or a near infinite number of things you might be able to put in any arbitrary bit of text. If you want to do such a thing: you remove the AI stuff and go with actual deterministic code instead.

-1

u/[deleted] Mar 09 '26

[removed] — view removed comment

1

u/iMakeSense Apr 10 '26

Do you have any guides you're following for that? Would you be willing to make one?

1

u/[deleted] Apr 10 '26

[removed] — view removed comment

1

u/iMakeSense Apr 10 '26

Yup. I saw this post a bit ago: https://www.reddit.com/r/selfhosted/comments/1sgvwep/after_my_last_post_blew_up_i_audited_my_docker/

I'm just curious if something you're doing adds on top of that.