PulseAugur
EN
LIVE 07:45:42

AI agents install vulnerable MCP servers due to outdated training data

By PulseAugur Editorial · [1 sources] ·

A security vulnerability dubbed MCPhantom has been discovered, where AI coding agents frequently install deprecated and vulnerable MCP servers. Researchers at Glow Labs found that in 98% of tracked sessions, agents selected these outdated servers from their training data rather than current, maintained versions. This issue affects multiple AI models from various vendors, including Anthropic and OpenAI, and poses a significant risk due to unpatched remote code execution bugs in some of the deprecated packages. AI

IMPACT AI agents may install vulnerable dependencies, requiring better security controls and model training data hygiene.

RANK_REASON Security research paper detailing a vulnerability in AI agent behavior. [lever_c_demoted from research: ic=1 ai=1.0]

Read on dev.to — MCP tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

AI agents install vulnerable MCP servers due to outdated training data

How we ranked this

Signal score
64 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security research paper detailing a vulnerability in AI agent behavior. [lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
safety, product
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — MCP tag TIER_1 English(EN) · Piekwerk ·

    MCPhantom: agents chose deprecated MCP servers in 98% of tracked sessions, and no patch is coming

    <p>On November 2 the Glow Labs research team at Glow Security published a finding it named <a href="https://www.glow.io/blogs/mcphantom-ai-coding-agents-are-installing-vulnerable-deprecated-mcp-servers-from-training-data" rel="noopener noreferrer">MCPhantom</a>: coding agents ask…

RELATED ENTITIES

RELATED TOPICS