News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack.

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by zdql on Tuesday July 08, 2025 @07:27PM (#44504937)
This feels misleading. MCP servers for supabase should be used as a dev tool, not as a production gateway to real data. Are people really building MCPs for this purpose?
[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by admiralrohan on Wednesday July 09, 2025 @09:42AM (#44509955)
Yes it's dev tool but when dev asks for data from DB through MCP it's accidentally running a sql injected by the attacker and reveals information to them.
[ Parent | on HN ]