Supabase’s MCP integration can expose an entire database to attackers
A flaw in Supabase’s Model Context Protocol (MCP) lets an attacker embed malicious prompts in support tickets, causing the AI‑driven IDE assistant to run arbitrary SQL with service_role rights. The exploit can dump every table, bypassing row‑level security. Teams using Supabase MCP must tighten input validation or restrict service_role usage.