Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A critical vulnerability in Microsoft's official Azure DevOps MCP server allows attackers to inject hidden HTML comments into pull request descriptions, which…
Tag: Azure DevOps MCP Server
Azure DevOps MCP Server Vulnerability Enables AI Agent Hijacking
The official Microsoft Azure DevOps MCP server has a missing prompt-injection guardrail in its pull request tool, allowing attackers to inject hidden…