Neon DB MCP exploited to exfiltrate customer data

Neon DB MCP exploited to exfiltrate customer data(tramlines.io)

3 points by coderinsan 315 days ago | 1 comment

This post is misleading and seems aimed at promoting a tool. As far as I can tell, there’s no actual exploit in the MCP server. The described scenario depends on tricking an authorized user into executing malicious commands. That applies to any MCP server with write access.

andrelandgraf 314 days ago |

This post is misleading and seems aimed at promoting a tool. As far as I can tell, there’s no actual exploit in the MCP server. The described scenario depends on tricking an authorized user into executing malicious commands. That applies to any MCP server with write access.