MCPhantom: agents chose deprecated MCP servers in 98% of tracked sessions, and no patch is coming
On November 2 the Glow Labs research team at Glow Security published a finding it named MCPhantom : coding agents asked to set up an MCP server keep installing deprecated ones, and the package name comes from the model's training data, not from anything the agent looked up. The servers in question…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-04 07:14 · DEV Community — AI
MCPhantom: agents chose deprecated MCP servers in 98% of tracked sessions, and no patch is coming