Azure DevOps
-
Microsoft Azure DevOps MCP flaw could let hidden PR comments steer AI agents, researchers say
Researchers said a hidden HTML comment in an Azure DevOps pull request could steer an AI coding agent into other projects and leak private data. Microsoft said the issue is a known AI risk, and no public CVE had been assigned.
