Vulnerability in agents from Google and others exposes structural flaw in MCP

Trust gaps in the new protocol spread malicious prompts from one agent to another.