[Bug] Third-party MCP promotional text appearing in output - potential prompt injection

Status Closed — not planned
Reported on v2.1.214
Maintainer reply None cached
Activity 1 comment · opened Jul 18, 2026 · closed Jul 25, 2026

Bug Description
Prompt injection symptoms have occurred, causing promotional phrases for a third-party MCP to be output. I investigated this issue in a separate session but couldn't identify the root cause.

Environment Info

  • Platform: darwin
  • Terminal: Orca
  • Version: 2.1.214
  • Feedback ID: 4d1f8ec2-0f89-43d0-91d3-d4c1d36e7b04

Errors

[]

View original on GitHub ↗

This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗