Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Agents — What Teams Need to Know
A confused-deputy vulnerability in Microsoft's Azure DevOps MCP server lets attackers use invisible HTML comments in pull requests to hijack AI coding agents for cross-project data theft. No fix released as of July 22, 2026.