importantSYS.SOURCE: The Hacker News• 2026-07-22T10:27:52+05:30

Microsoft Azure DevOps MCP Server Vulnerability Allows Hidden PR Comments to Manipulate AI Review Agents

#ai #vulnerability #security #devops

A vulnerability in Microsoft Azure DevOps MCP server allows hidden PR comments to manipulate AI review agents into accessing unauthorized projects and leaking data. The flaw exploits a missing prompt-injection guardrail in pull request descriptions, enabling attackers to leverage reviewer credentials for cross-project actions.

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds.

The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of its tools returns pull request descriptions without a prompt-injection guardrail the company had

Read original article

*** END OF TRANSMISSION ***

> PENTAGON REPEALS CONTROVERSIAL TESTOSTERONE SCREENING POLICY AMIDST LACK OF TRANSPARENCY > TERPSTRA KEYBOARD: 280 COLOR-CHANGING CONTINUOUS CONTROLLERS > NETHERLANDS TRANSFERS GOLD RESERVES FROM US AND CANADA AMID GEOPOLITICAL CONCERNS > OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES> PENTAGON REPEALS CONTROVERSIAL TESTOSTERONE SCREENING POLICY AMIDST LACK OF TRANSPARENCY > TERPSTRA KEYBOARD: 280 COLOR-CHANGING CONTINUOUS CONTROLLERS > NETHERLANDS TRANSFERS GOLD RESERVES FROM US AND CANADA AMID GEOPOLITICAL CONCERNS > OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES