Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
- Posted on July 22, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A hidden Azure DevOps PR comment can steer a reviewer’s AI agent into other projects and expose source code, secrets, and work items.
