←back to thread

Supabase MCP can leak your entire SQL database

(www.generalanalysis.com)
786 points rexpository | 1 comments | 08 Jul 25 17:46 UTC | HN request time: 0.201s | source
1. yard2010 ◴[08 Jul 25 18:38 UTC] No.44502764[source]▶
> The cursor assistant operates the Supabase database with elevated access via the service_role, which bypasses all row-level security (RLS) protections.

This is too bad.