Episode 283 - Intentionally-Vulnerable MCP Server, Hallucinating Software Packages
from Absolute AppSec
Ok, so vulnerable MCP tools are a thing now? Ken demonstrates installing and running an intentionally vulnerable MCP server with a bunch of example issues. Following is a discussion of the recent article and research around hallucinations of 3rd party dependencies/libraries in AI-Generated Python and JavaScript. New attack targets all dependent on how creative the LLM is allowed to be. A short aside on why we talk about AI and LLMs so much.
Embed this episode
No transcript yet.
Frequently asked questions
When was this Absolute AppSec episode published?
This episode was published on April 22, 2025.
Can I download this Absolute AppSec episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.