TikTok researchers show malicious MCP tool descriptions can make LLM agents leak user queries and sensitive data across multi-turn conversations.
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.
TikTok's Privacy Innovation Lab researchers warn that MCP tool descriptions can function as hidden instructions for AI agents and lead them to forward conversations. The work also warns that sensitive data may persist between shifts and combine between servers, even when the system receives instructions to omit them.