AIThe Hacker Newsabout 3 hours ago
Azure DevOps MCP Flaw Hijacks AI Agents
1 min read
A hidden HTML comment in an Azure DevOps pull request can hijack a reviewer's AI agent. Microsoft's MCP server returns PR descriptions without prompt-injection guardrails applied to other tools. Manifold Security demonstrated the attack using Copilot CLI and Claude Code, exfiltrating a confidential wiki page through the agent's own permissions.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
