Jul 222026 Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents A hidden Azure DevOps PR comment can steer a reviewer’s AI agent into other projects and expose source code, secrets, and work items.
