{"type":"post","id":"mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c","slug":"mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c","title":"MCPhantom: AI Agents Installing Deprecated MCP Servers","description":"Glow Labs says coding agents across several harnesses and model providers installed archived Anthropic MCP reference servers, often selecting package names from training data rather than checking for current alternatives.","retrieval_nugget":"Glow Labs says coding agents across several harnesses and model providers installed archived Anthropic MCP reference servers, often selecting package names from training data rather than checking for current alternatives. The researchers found four high-severity vulnerabilities, including a prompt-injection-to-remote-code-execution flaw in an unmaintained Puppeteer server. The finding turns package freshness into an endpoint-security problem.","published_at":"2026-11-04","updated_at":"2026-11-04","record_date":"2026-11-04","date_kind":"published_at","topics":["mcp","anthropic","claude"],"entities":["Glow Labs","Anthropic","MCP","Claude Code","Cursor","Codex CLI","Puppeteer","GitHub"],"related_patterns":["agent-security-moves-to-runtime-boundaries","agent-protocols-become-interoperability-layer"],"novelty_label":"new_fact","what_changed":"Glow Labs reports agents installing deprecated MCP servers from training data, with 98% of observed setups attributed to remembered packages and some servers carrying high-severity flaws.","prior_refs":["https://newruntime.com/posts/a-new-paper-finds-that-a-personal-agent-256a74/"],"source_url":"https://www.glow.io/blogs/mcphantom-ai-coding-agents-are-installing-vulnerable-deprecated-mcp-servers-from-training-data","source_urls":["https://www.glow.io/blogs/mcphantom-ai-coding-agents-are-installing-vulnerable-deprecated-mcp-servers-from-training-data"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c/","markdown":"https://newruntime.com/posts/mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c.md","json":"https://newruntime.com/posts/mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c.json"},"markdown_url":"https://newruntime.com/posts/mcphantom-ai-agents-installing-deprecated-mcp-servers-da529c.md","next_reads":[{"type":"topic","path":"/topics/mcp/","url":"https://newruntime.com/topics/mcp/","title":"Mcp","reason":"Explore the mcp topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/mcp.md","json_url":"https://newruntime.com/topics/mcp.json"},{"type":"topic","path":"/topics/anthropic/","url":"https://newruntime.com/topics/anthropic/","title":"Anthropic","reason":"Explore the anthropic topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/anthropic.md","json_url":"https://newruntime.com/topics/anthropic.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}