Why a Classic MCP Server Vulnerability Can Undermine Your Entire AI Agent