@misc{indiciaecf20c998e3c2, title = {Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models}, author = {Yannis Belkhiter and Giulio Zizzo and Sergio Maffeis and Seshu Tirupathi and John D. Kelleher}, year = {2026}, url = {https://arxiv.org/abs/2604.20994}, note = {Source identifier: 2604.20994} }