r their use of AI agents—have acknowledged vulnerabilities that exploit one agent inside a targeted network to spread harmful instructions to other internal agents. The technique is a special form of prompt injection that targets not the LLM but a particular agent, such as one for translation or data analysis. Guardrails inside such agents, if they exist at all, are often lax and will send the instructions to other agents down the chain. Because the latter agent explicitly trusts the first one, it follows the directions.

Unexpected and hard to mitigate

Independent researcher Syed Anas Mohiuddin tested agents from organizations including Google, JP Morgan Chase, Weviate, Rapid7, the French government's interministerial digital directorate, and the US federal government. His proof-of-concept attacks exploit trust gaps in MCP, short for Model Context Protocol. The standard is one way AI apps and agents communicate with each other inside an internal network. The illustration below shows a simplified MCP in action.

Read full article

Comments

28:T42e,{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://nvdium.com/en/articles/713719653#article","url":"https://nvdium.com/en/articles/713719653","headline":"MCP for agent-to-agent comms may be the riskiest protocol you've never heard of","description":"Trust gaps in the new protocol spread malicious prompts from one agent to another.","datePublished":"2026-10-05T23:10:29.431Z","dateModified":"2026-10-06T23:28:59.865