Log-To-Leak: Prompt Injection Attacks on Tool-Using LLM Agents via the Model Context Protocol.

arXiv:2610.36108v1 Announce Type: cross Abstract: LLM agents increasingly access external tools through the Model Context Protocol (MCP), but the natural-language metadata used to describe those tools creates a prompt-injection surface. Within this established