Re:Supabase MCP can leak an entire SQL Database, a lethal tr...
by refulgentis on Tuesday July 08, 2025 @03:55PM
(#44503442)
SQL injection attack?
Looked like Cursor x Supabase API tools x hypothetical support ticket system with read and write access, then the user asking it to read a support ticket, and the ticket says to use the Supabase API tool to do a schema dump.
Looked like Cursor x Supabase API tools x hypothetical support ticket system with read and write access, then the user asking it to read a support ticket, and the ticket says to use the Supabase API tool to do a schema dump.