@misc{indiciae40da285d8151, title = {No-Box Vulnerability Analysis: Description-only Detection of Indirect Prompt Injection Vulnerabilities in MCP Servers}, author = {Zehua Zhang and Jie Hu and Pratham Hegde and Aditya Maheshbhai Gabani and Souradip Nath and Yibo Liu and Siyu Liu and Hongkai Chen and Hulin Wang and Zhuoer Lyu and Chang Zhu and Divij Handa and Yan Shoshitaishvili and Tiffany Bao and Ruoyu Wang and Adam Doupé}, year = {2026}, url = {https://arxiv.org/abs/2609.10854}, note = {Source identifier: 2609.10854} }