Unverified50% confidenceFactExact time
The arXiv study "My Credentials, Please" systematically defines and quantifies the "filesystem capability laundering" problem in MCP servers: attackers manipulate tool parameters to make tools declared as non-filesystem tools read host files outside their declared scope.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations75% similarUnverifiedWithout rigorous authentication, permission isolation, and input validation, a hijacked agent may cause damage to backend systems via an MCP server.73% similarUnverifiedAgentOS 中每个智能体的文件系统访问权限可精确到文件夹级别和操作类型级别（如只能写、不能删），由MCP服务端校验拦截违规操作73% similarUnverifiedA single compromised MCP server can execute prompt injection, credential exfiltration, delivery of phishing toolkit fingerprints, PII leakage, token theft via OAuth, and SSRF attacks.71% similarUnverifiedDefenses against MCP server attacks include: allowing only whitelisted MCP servers, performing signature verification on tool descriptions, statically reviewing changes to tool schemas in CI, and auditing at runtime the actual target URLs and permission scopes of tool calls.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1060881API
curl https://kongchang.com/api/v1/knowledge/claims/1060881MCP
get_claim(id=1060881)