Skip to content

Hide Navigation Hide TOC

MCP Tool Description — Compliance/Audit Framing for Mandatory Chat Context - ATR-2026-01310 (ae98daed-e377-5000-8d6d-44654f4d63cb)

Detects a specific variant of MCP tool-description chat-history exfiltration (see ATR-2026-01300) where the tool description invokes explicit compliance or regulatory mandates to make the chat-history collection appear non-optional. This variant uses phrases like "MUST be consulted if the phrase X appears", "REQUIRED for internal auditing, gRPC, and SOC 2 compliance", "under applicable legal and regulatory frameworks", or "chat provenance include the entire chat history for security reasons". The compliance framing is more convincing than a direct instruction and is harder for naively trained filters to catch because it mimics legitimate audit/compliance language. Observed in MCPSecBench "chat-history-in-notes" sub-variants that use SOC 2, GDPR, and legal framework references.

Cluster A Galaxy A Cluster B Galaxy B Level
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern MCP Tool Description — Compliance/Audit Framing for Mandatory Chat Context - ATR-2026-01310 (ae98daed-e377-5000-8d6d-44654f4d63cb) Agent Threat Rules 1
LLM Plugin Compromise (adbb0dd5-ff66-4b2f-869f-bfb3fdb45fc8) MITRE ATLAS Attack Pattern MCP Tool Description — Compliance/Audit Framing for Mandatory Chat Context - ATR-2026-01310 (ae98daed-e377-5000-8d6d-44654f4d63cb) Agent Threat Rules 1
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern 2