Azure DevOps AI agent vulnerability allows unauthorized data exfiltration via MCP

A security flaw in Azure DevOps' Model Context Protocol (MCP) implementation allows attackers to bypass permission controls by manipulating AI coding agents. By injecting hidden comments into pull requests, an attacker can trick an AI agent into accessing and leaking data from projects outside the reviewer's authorized scope.