News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by jchanimal on Tuesday July 08, 2025 @03:33PM (#44503255)
This is a reason to prefer embedded databases that only contain data scoped to a single user or group.

Then MCP and other agents can run wild within a safer container. The issue here comes from intermingling data.

[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by freeone3000 on Tuesday July 08, 2025 @05:48PM (#44504362)
You can get similar access restrictions using fine-grained access controls - one (db) user per (actual) user.
[ Parent | on HN ]