Agentjacking: Semantic Logic Hijacking of AI Agents via Model Context Protocol MCP
Research by Tenet Security and Saptang Labs has identified "Agentjacking," a critical vulnerability where autonomous AI coding agents are compromised via indirect prompt injection. By embedding malicious payloads within unstructured text—such as fake bug reports in legitimate issue trackers—attackers manipulate the agent's reasoning process. This technique exploits Model Context Protocol (MCP) trust boundary violations to trigger unauthorized tool-calling and function execution. Because the attack is embedded in semantic grounding data rather than malicious files, it bypasses traditional EDR, WAF, and signature-based security controls. This poses a severe risk of Remote Code Execution (RCE) within highly sensitive $250B+ corporate infrastructures and CI/CD pipelines.