An audit of 2,000 public MCP servers found 41% request file or network access beyond what their tools need, widening what a prompt-injected agent can reach.
Sample content: on the live site this story follows the same structure, with what happened, who is affected, what to do, an FAQ and sources.

