The official Microsoft Azure DevOps MCP server has a missing prompt-injection guardrail in its pull request tool, allowing attackers to inject hidden commands that AI agents execute.
The official Microsoft Azure DevOps MCP server has a missing prompt-injection guardrail in its pull request tool, allowing attackers to inject hidden commands that AI agents execute.