Firehose

Detecting ANSI Escape Sequence Injection (AESI) in MCP servers is crucial, as attackers can hide instructions from humans while leaving them legible to AI models. DAST (Dynamic Application Security Testing) is the natural approach to catching this vulnerability, as it exercises a running target from the outside and inspects real responses for evidence of a vulnerability. Two variants of the attack, direct-fetch and stored AESI, put agent actions, human-in-the-loop bypass, and log manipulation at risk. AI summary