OASB
Attacks/Fake Tool Detection/FAKETOOL-005
CRITICALCWE-706

FAKETOOL-005 Tool Priority Escalation

Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks

Description

Registers a fake tool with maximum priority so it intercepts calls before the legitimate tool can respond

Remediation

Reject tool registration with duplicate names. Tool priority must be set at configuration time, not registration time. Implement tool namespace isolation per server.

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-706