Azure DevOps

Azure DevOps is Microsoft's cloud-based platform for managing the entire software development lifecycle, including version control, CI/CD pipelines, testing, and deployment. For AI governance, it provides audit trails and access controls that help organizations track changes to AI models and training data, enforce code review policies, and maintain compliance with regulatory requirements. Teams use it to implement guardrails around model development and ensure proper documentation of AI system changes across the enterprise.

1 item

ResearchGlobal2026-08-04

Azure DevOps MCP Prompt Injection Let Attackers Hijack AI Review Agents

A vulnerability in Microsoft's Azure DevOps Model Context Protocol integration allowed hidden content embedded in pull request comments to hijack an AI code review agent and redirect it to execute attacker-controlled instructions using the agent's own platform permissions. The root failures were absent prompt-injection defenses, insufficient input sanitization, and inadequate privilege separation between reviewer-supplied content and agent tool execution. Enterprise teams using AI agents in code review or CI/CD pipelines face an immediate and concrete exposure.

prompt injection agentic AI Azure DevOps MCP Microsoft developer tools code review CI/CD security