An alias that walked past my SQL guard: red-teaming an MCP server for warehouse access

A CTE alias bypassed the table allowlist in my MCP SQL guard. How an independent review found it, the fix, and what a red team caught.

Read Original

Related