CVE-2026-108604
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agen
CVSS
6.3
Média
EPSS
0.2%
p10
KEV
—
Exploit Today
3
0-100
Publicado: 10 de out. de 2026 · Última mod.: 16 de out. de 2026 · CWE-863
0.1%EPSS · 30 dias0.2%
2026-10-112026-11-05
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.
- github.comhttps://github.com/TabularisDB/tabularis
- github.comhttps://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/ai_activity.rs#L357-L416
- github.comhttps://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/mcp/mod.rs#L1136-L1171
- hackmd.iohttps://hackmd.io/@haind/S1BofaIsMx
- www.vulncheck.comhttps://www.vulncheck.com/advisories/tabularis-through-0.27.0-read-only-bypass-via-mcp-run-query-select-classification
- hackmd.iohttps://hackmd.io/@haind/S1BofaIsMx
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1233343.8 BAI—
———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project9hCVE-2026-1233333.8 BAI—
———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints9hCVE-2026-1233286.4 MÉD—
———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab9hCVE-2026-1233267.1 ALT—
———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension9hCVE-2026-1233247.7 ALT—
———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible9hCVE-2026-1232993.1 BAI—
———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible9h