News for hackers. Stuff that matters.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by ethbr1 on Thursday July 10, 2025 @08:57AM (#44520489)
> The moment you add smarts, you now need to analyse the possibility of injection via any column the tool is allowed to read from.

Viewed this way, you'd want to look at something like the cartesian product for {inputFields} x {llmPermissions}, no?

Idea being that limiting either constrains the potential exploitation space.

There are no comments on this comment yet.