An AI version of session hijacking can lead to attackers injecting malicious prompts into legitimate MCP communications.