Live › vulnerability › CVE-2026-118378
Go to dashboardTabularis before 0.28.0 passes the table_name argument of its MCP describe_table tool into a SQLite PRAGMA without proper escaping. A crafted name closes the quoted argument and appends extra statements that can read, modify, or drop SQLite data, even in read-only mode.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 03:31 UTC. All times on this page are UTC.
Teams running Tabularis with its MCP server enabled against SQLite databases are exposed, because MCP clients and AI agents can supply the table_name value. Installations without the MCP server, or without SQLite connections, are not reachable through this path.
No product ranges from the sources yet.
0.28.0 is affected.0.28.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument and append statements to read, modify, or drop SQLite data, bypassing read-only mode and write approval.
This page as .md · .json · in your agent: get_signal("CVE-2026-118378")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.