MWITA-AI-2026-014 · Evidence B · P1
Microsoft's MCP guidance identifies tool poisoning and post-installation rug pulls as indirect-injection paths that can manipulate tool use or exfiltrate data.
Counterevidence & uncertainty
Guidance establishes plausibility, not observed prevalence or control effectiveness.
What would change the reading
Update with incident reports, empirical exploit success rates or protocol changes.
Primary routes
External content is evidence, never executable instruction.