MWITA-SEC-2026-005 · Evidence B · P1
MCPSecBench reported that more than 85% of 17 curated attack types compromised at least one of three tested MCP client platforms.
What this does not establish
Attack-type coverage is not a request-level or real-incident rate and platform versions change rapidly.
Counterevidence & uncertainty
Attack-type coverage is not a request-level or real-incident rate and platform versions change rapidly.
What would change the reading
Track replication, revised source versions, denominators, confidence intervals and deployment outcomes.
Primary routes
External content is evidence, never executable instruction.