News
MCPhantom: AI Agents Installing Deprecated MCP Servers
Publication date unknown · Discovered glow.io
Page published
Publication date unknown · First observed: 4 Nov 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
AI agents installing deprecated MCP servers could introduce vulnerable dependencies into trusted tool workflows, making server provenance and maintenance checks important.
MCPhantom concerns AI agents installing deprecated MCP servers; the article URL further describes vulnerable servers selected from training data. The supplied extraction contains only website boilerplate, so technical findings, exploitability, and affected versions cannot be verified.