MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

The Model Context Protocol (MCP) is a new and risky protocol for agent-to-agent communication, creating opportunities for attackers to exfiltrate sensitive data. This technique, a form of prompt injection, exploits trust gaps within internal networks, allowing malicious prompts to spread from one AI agent to another. Independent researcher Syed Anas Mohiuddin's proof-of-concept attacks demonstrated how lax guardrails in special-purpose agents, combined with MCP servers storing credentials and agents trusting each other, can lead to vulnerabilities like server-side request forgery.

This report uniquely details how the Model Context Protocol (MCP) facilitates agent-to-agent prompt injection, unlike other prompt injection methods that target LLMs directly.