· ai-devtools
Glow Labs research finds AI coding agents install unpatched MCP servers in 98% of sessions
An AI coding agent, when instructed to "set up a GitHub MCP," must select a specific package.
New investigations conducted by Glow Labs have documented instances where the agent chose a package from an archived repository that will receive no further patches.
Analyzing actual transcripts from these AI coding sessions, Glow Labs identified outdated MCP servers being installed directly onto developer machines.
This recurring issue has been given the name MCPhantom by the researchers.
The pattern emerged in an alarming majority of the sessions reviewed; in 98% of those instances, the agent exhibited this behavior.
This finding was initially published on Help Net Security.
Why it matters
This highlights a significant security risk in current AI coding agent tooling. Developers must be aware that automated setup processes can introduce permanently vulnerable components into their environments.
