My Credentials, Please: Detecting Filesystem Capability Laundering in MCP Servers at Scale
Researchers find filesystem capability laundering in MCP servers, including two CVEs in Anthropic's Git server.
Stories per day · 30 days
1 RSS
2 stories, newest first · one card per story
Stories tagged #capability-laundering
Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs
Attack shows unaligned orchestrators can launder capabilities from aligned frontier LLMs via benign subtask consultation, raising Gemma-4-31B CBRN rubric score from 62.3 to 83.1.