Researchers measure MCP tool poisoning with mcpvenom

Researchers present the first cross-framework measurement of Model Context Protocol tool poisoning with real tool execution using an open-source tool called mcpvenom. Evaluating 12 frameworks, 18 models, and 45 attack scenarios, they found an overall attack success rate of 22.9%, with resistance operating primarily at the model level and no framework implementing intentional defense. Open article →