Hidden Comments in Azure DevOps Enable Takeover of AI Review Agents22. July 2026AI Models, CybersecurityA missing prompt injection protection measure in the Azure DevOps MCP server allows hidden comments to redirect control flow of AI agents and trigger data leaks. Share on: