Microsoft Azure DevOps MCP Flaw Allows Hidden Pull Request Comments To Hijack AI Agents
Researchers discovered a flaw in Microsoft Azure DevOps MCP Server that allows hidden pull request comments to manipulate AI review agents and access sensitive project data.