Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

A hidden Azure DevOps PR comment can steer a reviewer’s AI agent into other projects and expose source code, secrets, and work items.

Raccontata dathehackernews.com