TY - RPRT TI - Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem AU - Xinyi Hou AU - Yanjie Zhao AU - Haoyu Wang PY - 2026 UR - https://arxiv.org/abs/2605.07836 ID - 2605.07836 ER -