Question

Your team deploys a conversational network-automation agent that connects to several MCP servers to fetch device data and push configuration. During a security review, a colleague discovers that one MCP server is pulled from a public registry and is not pinned to a specific version or verified by digital signature; the agent auto-loads whatever tools that server advertises at connection time. Which security risk does this configuration MOST directly introduce?

Accepted Answer

A supply-chain threat where a compromised or updated MCP server can silently register malicious tools that the agent executes against production devices

Answer

A denial-of-service vulnerability caused by the LLM exceeding its context window when tool descriptions are too long

Answer

A data-privacy violation because RESTCONF payloads are transmitted without TLS between the agent and the devices

Answer

A hallucination risk where the LLM invents YANG paths that do not exist on the target platform