Log-To-Leak Prompt Injection via Model Context Protocol

Log-To-Leak exploits natural-language metadata in the Model Context Protocol (MCP) to trigger unauthorized tool calls. By targeting server responses and agent logs, the attack achieves a 62.64-100% success rate in inducing post-hoc, attacker-controlled executions while maintaining legitimate behavior.