Tool Poisoning on MCP Servers: The Attack Vector Nobody's PatchingEverybody's shipping AI agents. Nobody's auditing their toolchains.Sep 17, 2026·7 min read·1