The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of its tools returns pull request descriptions without a prompt-injection guardrail the company had
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of its tools returns pull request descriptions without a prompt-injection guardrail the company had
SOCIAL SHARE CARD GENERATOR