Google Chrome is warning developers that WebMCP tools can be used to manipulate and hijack AI agents. New guidance outlines how attackers can manipulate agents operating in a user’s browser, including within their authenticated sessions. Chrome published two guides, one for web developers and another for AI agent developers.

Exploits Are Not Specific To WebMCP

The warning has two disclaimers that explain that the exploits are not specific to WebMCP but are flaws inherent in LLMs and Chrome extensions.

The first disclaimer says the threat is not unique to WebMCP.…