🛡️ AI Security Field Guide — LLM + MCP Security

The most comprehensive, up-to-date, practitioner-first security reference for LLM applications and Model Context Protocol (MCP) deployments.
Covers real CVEs, live attack patterns, OWASP frameworks, red teaming tools, and actionable checklists — updated weekly.

---

Why This Guide Exists

The AI security landscape shifted dramatically in 2025–2026:

• 🔴 492 MCP servers publicly exposed with no authentication (Trend Micro, 2026)
• 🔴 CVE-2025-6514 compromised 437,000+ developer environments via mcp-remote OAuth proxy
• 🔴 1,184 malicious skills confirmed across the ClawHub agent registry (Antiy CERT, 2026)
• 🔴 Claude Code RCE vulnerability (CVE-2025-59536, CVSS 8.7) — triggered by opening a repo
• 🔴 OWASP released 2 new frameworks: LLM Top 10 (2025) + Agentic Top 10 / ASI (Dec 2025)

Most tutorials show you how to build with MCP and LLMs. Almost none show you how to secure them. This is that guide.

---

Table of Contents

Part 1 — LLM Security (OWASP LLM Top 10)

• LLM01: Prompt Injection
• LLM02: Insecure Output Handling
• LLM03: Training Data Poisoning
• LLM04: Model Denial of Service
• LLM05: Supply Chain Vulnerabilities
• LLM06: Sensitive Information Disclosure
• LLM07: Insecure Plugin Design
• LLM08: Excessive Agency
• LLM09: Overreliance
• LLM10: Model Theft

Part 2 — MCP Security (OWASP MCP Top 10)

• MCP Attack Surface Overview
• MCP01: Token Mismanagement
• MCP02: Tool Poisoning
• MCP03: Prompt Injection via MCP
• MCP04: Confused Deputy Attacks
• MCP05: Supply Chain Attacks
• MCP06: Context Poisoning
• MCP07: OAuth Misconfiguration
• MCP08: SSRF via Fetch Servers
• MCP09: Scope Creep
• MCP10: Insecure Transport
• Real CVE Database

Part 3 — OWASP Agentic Top 10 (ASI 2026)

• ASI01: Agent Goal Hijack
• ASI02: Tool Misuse
• ASI03: Identity & Privilege Abuse
• ASI04–ASI10: Full Coverage

Part 4 — Red Teaming

• Methodology
• Tools Reference
• Attack Library

Part 5 — Checklists

• MCP Security Checklist
• LLM App Checklist
• Agentic System Checklist

---

Real CVE Quick Reference

Live tracker: vulnerablemcp.info

---

Frameworks Covered

---

Red Teaming Tools

---

Contributing

Contributions are welcome. See CONTRIBUTING.md.

• Found a new CVE? Open an issue.
• Better mitigation code? Submit a PR.
• New attack pattern? Document it.

---

License

CC BY 4.0 — Free to use, share, and build on with attribution.

---

⭐ Star this repo if it helped you secure something. It helps others find it.