Mid-Session Tool Injection (MSTI) Evaluation on WebMCP MSTI Testbed (test)
100ASR (GPT-5.4)AbortSignal hijack
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| AbortSignal hijackCondition ID=C1, Attack Category=Tool Presence Manipulation2026.06 | 100 | 100 | 82 | 94 | 18 | |
| Registration raceCondition ID=C3, Attack Category=Tool Presence Manipulation2026.06 | 100 | 100 | 100 | 100 | 17 | |
| Description injectionCondition ID=C2, Attack Category=Tool Framing2026.06 | 78 | 38 | 62 | 59 | 81 | |
| Composite (desc + hint)Condition ID=C5, Attack Category=Composite Manipulation2026.06 | 78 | 35 | 70 | 61 | 85 | |
| Long-desc. overflowCondition ID=C4, Attack Category=Tool Framing2026.06 | 35 | 0 | 72 | 36 | 85 |