Supabase MCP can leak your entire SQL database

one day everything private will be leaked and they'll blame it on misconfiguration by someone they can't even point a finger at. some contractor on another continent.

how many of you have auth/athr just one `if` away from disaster?

we will have a massive cloud leak before agi

We still have exposed MongoDB databases floating all over the internet waiting to be breached.

Now we have a version of this for AI, with MCP servers connected directly to databases waiting to be exfiltrated via prompt injection attacks.

I will be starting the timer for when a massive prompt injection-based data breach because someone exposed their MCP server.