Unverified50% confidenceCautionExact time
If an MCP server lacks tenant isolation, attackers can read or tamper with data across tenants by enumerating other tenants' workspace IDs.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn multi-tenant deployments, an authenticated caller may read storage data belonging to other tenants through ordinary range searches or list_namespaces calls, constituting unauthorized lateral access.65% similarUnverified云端多租户推理服务中，多个用户的KV Cache可能共存于同一块GPU显存中，一旦引擎被攻破可能造成跨租户数据泄露63% similarUnverifiedFor mcp-server-fetch, which requires access to external networks, production environments need additional attention to sandbox isolation and request allowlist configuration to prevent models from being induced to initiate malicious requests.61% similarUnverifiedPermissions granted to agents via MCP may involve write operations, system calls, and even access to sensitive data, not merely read-only queries.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/996158API
curl https://kongchang.com/api/v1/knowledge/claims/996158MCP
get_claim(id=996158)