SUPABASE MCP CAN LEAK YOUR ENTIRE SQL DATABASE

Summary from the TLDR Web Dev newsletter

Supabase's MCP integration can lead to the leakage of sensitive SQL database information. The attack involves a malicious user crafting a support ticket message that instructs an LLM, operating with elevated privileges (service_role), to extract data from sensitive tables and insert it into a user-accessible support thread. The main issue is the LLM's inability to distinguish between legitimate data and malicious instructions embedded within user-provided text.