# Researcher finds MCP trust flaw in Google, JP Morgan agents

Digest AI · Policy & Regulation · published 2026-10-05T22:26:35Z

Canonical: https://digestai.news/story/researcher-finds-mcp-trust-flaw-in-google-jp-morgan-agents

## Summary

Independent researcher Syed Anas Mohiuddin has identified a structural vulnerability in the Model Context Protocol (MCP), a standard used for AI agents to communicate within internal networks. The flaw exploits the inherent trust between agents, allowing a compromised agent to spread malicious instructions to others, such as those handling translation or data analysis. This technique bypasses standard LLM guardrails because the receiving agent explicitly trusts the sender.

Mohiuddin demonstrated proof-of-concept attacks against agents from Google, JP Morgan Chase, Weviate, Rapid7, the French government’s interministerial digital directorate, and the US federal government. Over the past five months, these organizations have acknowledged vulnerabilities that allow attackers to exfiltrate sensitive data or execute unauthorized network requests, a type of server-side request forgery. The issue arises because many special-purpose agents lack robust guardrails, and MCP servers store credentials that facilitate this lateral movement within trusted internal environments.

## Key points

- Researcher Syed Anas Mohiuddin found a trust gap in MCP allowing malicious agent-to-agent instruction spreading.
- Vulnerabilities were acknowledged by Google, JP Morgan Chase, Weviate, Rapid7, and two government bodies.
- The flaw enables server-side request forgery by exploiting lax guardrails in special-purpose agents.

## Why it matters

This exposes a critical security weakness in the emerging AI agent ecosystem. As organizations deploy interconnected agents, this trust-based vulnerability could allow attackers to bypass perimeter defenses and compromise internal data systems at scale.

## Sources

1. [Vulnerability in agents from Google and others exposes structural flaw in MCP](https://arstechnica.com/security/2026/10/vulnerability-in-agents-from-google-and-others-exposes-structural-flaw-in-mcp) (Ars Technica AI, 2026-10-05)

## Cite

Digest AI, "Researcher finds MCP trust flaw in Google, JP Morgan agents", 5 October 2026, https://digestai.news/story/researcher-finds-mcp-trust-flaw-in-google-jp-morgan-agents

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/researcher-finds-mcp-trust-flaw-in-google-jp-morgan-agents.json