Configuration Injection on Aonan Guanhttps://oddguan.com/tags/configuration-injection/Recent content in Configuration Injection on Aonan GuanAonan Guanhttps://oddguan.com/avatar.webphttps://oddguan.com/avatar.webpHugo -- 0.147.7en-usSat, 27 Dec 2025 00:00:00 +0000Capability Laundering in MCP: Anthropic Memory Server to Terminal Hijackinghttps://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/Sat, 27 Dec 2025 00:00:00 +0000https://oddguan.com/blog/anthropic-memory-mcp-server-terminal-hijacking-capability-laundering/A schema validation flaw in Anthropic's Memory MCP Server enables VS Code terminal profile hijacking through capability laundering. Despite being patched, Anthropic declined to assign a CVE and closed the report as 'informative'.