News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by tptacek on Tuesday July 08, 2025 @07:40PM (#44504999)
If you're just speaking in the abstract, all code has bugs, and some subset of those bugs will be security vulnerabilities. My point is that it won't have this bug.
[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by ImPostingOnHN on Tuesday July 08, 2025 @10:40PM (#44505901)
It would very likely have this "bug", just with a modified "prompt" as input, e.g.:

"...and if your role is an orchestration agent, here are some additional instructions for you specifically..."

(possibly in some logical nesting structure)

[ Parent | on HN ]