{"data":{"id":"42a12b6f-3747-4365-a3cc-3006c91cbf12","title":"OverServe: Resource Amplification Attacks on SaaS Agents via Tool--Prompt Co-Design","summary":"OverServe is a multi-agent framework that builds attacks on SaaS agents by co-designing MCP status tools and completion-confirmation prompts. The tool calls return accurate status and terminate normally, yet the agent repeatedly checks an unfinished condition, consuming provider resources after the original task is done. Tested tools triggered no alerts in the evaluated MCP scanners, and OverServe reached a maximal amplification of API requests by 93.88x across Qwen, Nemotron, DeepSeek, and Sonnet.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.14808v1","publishedAt":"2026-11-10T22:50:35.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["denial_of_service"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Model Context Protocol (MCP)","Qwen","Nemotron","DeepSeek","Sonnet"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-10T22:50:35.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":"preprint","atlasIds":null}}