AI Agent Security Weekly | Issue 18

The boundary between request and execution was never enforced. Three incidents confirmed that the MCP server, the protocol standard, and the container authorization gate all let the request reach the