{"data":{"id":"22cb85b6-693d-4e87-a651-f3c0d6d99529","title":"CVE-2026-118378: Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute…","summary":"Tabularis versions before 0.28.0 contain an SQL injection flaw in their SQLite driver, tracked as CVE-2026-118378. A crafted table_name supplied to the describe_table tool lets MCP clients run stacked statements by closing the quoted PRAGMA argument. An attacker, including an AI agent steered by untrusted content, can read, modify, or drop SQLite data while bypassing read-only mode and write approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-118378","publishedAt":"2026-10-28T03:17:14.570Z","cveId":"CVE-2026-118378","cweIds":["CWE-89"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Tabularis","MCP (Model Context Protocol)","AI agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Tabularis SQLite driver SQL injection through MCP describe_table tool","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-28T06:10:00.523Z","kevDateAdded":null,"advisoryAliases":["GHSA-v867-6qx2-gwmg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T06:10:03.814Z","patchAvailable":null,"disclosureDate":"2026-10-28T03:17:14.570Z","capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0051"]}}