Researcher finds trust gaps between AI agents

Ars Technica reports that researcher Syed Anas Mohiuddin found weaknesses that let malicious instructions or requests move between AI agents and tools. Google and Rapid7 acknowledged and fixed specific vulnerabilities. The research highlights gaps in authorization and input validation; it does not establish that every MCP installation is vulnerable.