Official Azure MCP exploited to steal users Keyvaults secretstramlines.io 4 pointscoderinsan1 year ago1 commentSaveHideCopy link On HNComments−rvz1yTramlines.io presents: Another day, another official MCP server exploited. Again.Why on earth does Azure need an MCP server? MCPs do not belong anywhere near a critical system responsible for storing sensitive secrets or env vars.Now the official Azure MCP server can be breach with all your key-vault secrets exfiltrated.I think this tells you that "MCP" is rising to becoming the worst protocol standard that has ever been designed.And once again, no-one cares. (they really should)
Comments
Tramlines.io presents: Another day, another official MCP server exploited. Again.
Why on earth does Azure need an MCP server? MCPs do not belong anywhere near a critical system responsible for storing sensitive secrets or env vars.
Now the official Azure MCP server can be breach with all your key-vault secrets exfiltrated.
I think this tells you that "MCP" is rising to becoming the worst protocol standard that has ever been designed.
And once again, no-one cares. (they really should)