{"data":{"id":"99425af5-d6c9-48de-a3a5-8546fe7b4f0a","title":"Where Does MCP Security End? A Three-Tier Mitigation Mapping Framework for the OWASP MCP Top 10","summary":"This paper maps the OWASP MCP Top 10 to three architectural tiers (server-primary, gateway-primary, protocol-primary) using a cascading decision tree and Design Science Research. It was validated against an enterprise Managed File Transfer MCP server built in Go, where high-confidence server-tier controls worked as predicted but protocol-tier controls failed for architectural reasons beyond server implementation.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.02611v1","publishedAt":"2026-11-02T06:36:08.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Model Context Protocol (MCP)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-02T06:36:08.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}