Study finds AI agents can be tricked into executing attacker-controlled tool calls by echoing them back. Researchers also uncovered 253 verified security bugs across 118 open-source MCP servers.