{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:YKKIYP2FIGRWRHRJRINQLNQ3WR","short_pith_number":"pith:YKKIYP2F","canonical_record":{"source":{"id":"2607.07461","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T14:29:23Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"3b9585cea1c486c6b21b724aa8026badd4522f803110fe0f2c25fdf3fc8db877","abstract_canon_sha256":"3b7196de6300cba2d020c59342d1f63d4ef5fce57eb433f38cae0a85bba68a2a"},"schema_version":"1.0"},"canonical_sha256":"c2948c3f4541a3689e298a1b05b61bb4543005e25912aa32d73b5149eb593e9b","source":{"kind":"arxiv","id":"2607.07461","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07461","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07461v1","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07461","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_12","alias_value":"YKKIYP2FIGRW","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_16","alias_value":"YKKIYP2FIGRWRHRJ","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_8","alias_value":"YKKIYP2F","created_at":"2026-07-09T01:20:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:YKKIYP2FIGRWRHRJRINQLNQ3WR","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07461","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T14:29:23Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"3b9585cea1c486c6b21b724aa8026badd4522f803110fe0f2c25fdf3fc8db877","abstract_canon_sha256":"3b7196de6300cba2d020c59342d1f63d4ef5fce57eb433f38cae0a85bba68a2a"},"schema_version":"1.0"},"canonical_sha256":"c2948c3f4541a3689e298a1b05b61bb4543005e25912aa32d73b5149eb593e9b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T01:20:25.594627Z","signature_b64":"2B7pmj1lGmNOQ4M9fkneoIoWhh8nPImsvK73Wuw+Mx07EGH3xsCrBZ1Cw5AiqZvtwifSph/Ay0kNvUpYW11iDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c2948c3f4541a3689e298a1b05b61bb4543005e25912aa32d73b5149eb593e9b","last_reissued_at":"2026-07-09T01:20:25.594156Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T01:20:25.594156Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07461","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h/vjzy0jpoDuM957/JNOtnVqMfQdBWEeYkrPOVi2f8WA6AfCiUPt0qaRehfHB3fYHSeMTeZxNddfP8p/R+QxCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T19:00:14.979604Z"},"content_sha256":"70c3b990db138024543997a24af4f3f9b04221ae37670ae5480a1bc1e67c2815","schema_version":"1.0","event_id":"sha256:70c3b990db138024543997a24af4f3f9b04221ae37670ae5480a1bc1e67c2815"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:YKKIYP2FIGRWRHRJRINQLNQ3WR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Chengyao Sun, Jiaheng Fu, Kaifeng Huang, Ruixiang Wu, Yang Shi, Yihe Huang","submitted_at":"2026-07-08T14:29:23Z","abstract_excerpt":"Large language models (LLMs) are increasingly deployed as autonomous agents that interact with external tools and services via the Model Context Protocol (MCP), a standardized interface for dynamic tool invocation. While MCP simplifies integration, it also expands the attack surface and enables generic exploits across multiple servers. Despite prior work on malicious MCP servers, the vulnerability landscape of MCP servers remains underexplored. In this work, we systematically analyze MCP server vulnerabilities, focusing on metadata characteristics, vulnerable code patterns, and community respo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07461","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07461/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+E8bpvTzUIt3sQIvV29PNhqw2ruy+p22tZdTsOLm2/lxAtWPnrThQxRZX3o1DpaxFPRACcm/Y+Ysq+IMg8HyCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T19:00:14.979987Z"},"content_sha256":"33087fbe98252f45f4761f259ca0fdcbcf8c4351d407e3fe85ba3f16afe00d6a","schema_version":"1.0","event_id":"sha256:33087fbe98252f45f4761f259ca0fdcbcf8c4351d407e3fe85ba3f16afe00d6a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/bundle.json","state_url":"https://pith.science/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-11T19:00:14Z","links":{"resolver":"https://pith.science/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR","bundle":"https://pith.science/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/bundle.json","state":"https://pith.science/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YKKIYP2FIGRWRHRJRINQLNQ3WR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:YKKIYP2FIGRWRHRJRINQLNQ3WR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b7196de6300cba2d020c59342d1f63d4ef5fce57eb433f38cae0a85bba68a2a","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T14:29:23Z","title_canon_sha256":"3b9585cea1c486c6b21b724aa8026badd4522f803110fe0f2c25fdf3fc8db877"},"schema_version":"1.0","source":{"id":"2607.07461","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07461","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07461v1","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07461","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_12","alias_value":"YKKIYP2FIGRW","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_16","alias_value":"YKKIYP2FIGRWRHRJ","created_at":"2026-07-09T01:20:25Z"},{"alias_kind":"pith_short_8","alias_value":"YKKIYP2F","created_at":"2026-07-09T01:20:25Z"}],"graph_snapshots":[{"event_id":"sha256:33087fbe98252f45f4761f259ca0fdcbcf8c4351d407e3fe85ba3f16afe00d6a","target":"graph","created_at":"2026-07-09T01:20:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07461/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are increasingly deployed as autonomous agents that interact with external tools and services via the Model Context Protocol (MCP), a standardized interface for dynamic tool invocation. While MCP simplifies integration, it also expands the attack surface and enables generic exploits across multiple servers. Despite prior work on malicious MCP servers, the vulnerability landscape of MCP servers remains underexplored. In this work, we systematically analyze MCP server vulnerabilities, focusing on metadata characteristics, vulnerable code patterns, and community respo","authors_text":"Chengyao Sun, Jiaheng Fu, Kaifeng Huang, Ruixiang Wu, Yang Shi, Yihe Huang","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07461","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:70c3b990db138024543997a24af4f3f9b04221ae37670ae5480a1bc1e67c2815","target":"record","created_at":"2026-07-09T01:20:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b7196de6300cba2d020c59342d1f63d4ef5fce57eb433f38cae0a85bba68a2a","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-08T14:29:23Z","title_canon_sha256":"3b9585cea1c486c6b21b724aa8026badd4522f803110fe0f2c25fdf3fc8db877"},"schema_version":"1.0","source":{"id":"2607.07461","kind":"arxiv","version":1}},"canonical_sha256":"c2948c3f4541a3689e298a1b05b61bb4543005e25912aa32d73b5149eb593e9b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c2948c3f4541a3689e298a1b05b61bb4543005e25912aa32d73b5149eb593e9b","first_computed_at":"2026-07-09T01:20:25.594156Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T01:20:25.594156Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2B7pmj1lGmNOQ4M9fkneoIoWhh8nPImsvK73Wuw+Mx07EGH3xsCrBZ1Cw5AiqZvtwifSph/Ay0kNvUpYW11iDQ==","signature_status":"signed_v1","signed_at":"2026-07-09T01:20:25.594627Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07461","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:70c3b990db138024543997a24af4f3f9b04221ae37670ae5480a1bc1e67c2815","sha256:33087fbe98252f45f4761f259ca0fdcbcf8c4351d407e3fe85ba3f16afe00d6a"],"state_sha256":"2bc66b67af50de44e69a5ba4b37e18ad77d9e9dc7ccd3b7e917829ee35e17718"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zTZaYeqrh+bfVqAHiyqEYbG4KlNwzw9WVud/0bXqhoZHHR2VRGhqmZTLSQ/9qZ2sC2X7Zr6Ds96jXTmuibW/Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-11T19:00:14.981990Z","bundle_sha256":"2a84b5c45922a6308c73bea4f1bf324cffb985868987e377162aa8f59efe2e2f"}}