News

MCPhantom: AI Agents Installing Deprecated MCP Servers

Page published

Publication date unknown · First observed: 4 Nov 2026

Coverage timeline

4 Nov 2026glow.ioobserved

Single-source incident — one report is available.

Why it matters

AI agents installing deprecated MCP servers could introduce vulnerable dependencies into trusted tool workflows, making server provenance and maintenance checks important.

MCPhantom concerns AI agents installing deprecated MCP servers; the article URL further describes vulnerable servers selected from training data. The supplied extraction contains only website boilerplate, so technical findings, exploitability, and affected versions cannot be verified.