CVE-2026-118378

HighCVSS 7.8

Published: 28/10/2026(UTC)Updated: 02/11/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers can close the quoted PRAGMA argument and append statements to read, modify, or drop SQLite data, bypassing read-only mode and write approval.

Risk Assessment

Attackers, including AI agents steered by untrusted content, can modify or delete data in the SQLite database, leading to loss of data integrity and confidentiality. Bypassing read-only mode increases the risk of unauthorized changes.

Recommendation

Update Tabularis to version 0.28.0 or later. Until updated, restrict access to the describe_table tool and monitor for unusual queries.

Other vulnerabilities in Tabularis

CVE-2026-108604Medium
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate. It allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements such as SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE, modifying data without approval prompts.

Original NVD description (English source)

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument and append statements to read, modify, or drop SQLite data, bypassing read-only mode and write approval.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS