GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)
477 points by andy99 | 287 comments
Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.