CVE-2026-118378: Tabularis SQLite driver SQL injection through MCP describe_table tool

Summary

Tabularis versions before 0.28.0 contain an SQL injection flaw in their SQLite driver, tracked as CVE-2026-118378. A crafted table_name supplied to the describe_table tool lets MCP clients run stacked statements by closing the quoted PRAGMA argument. An attacker, including an AI agent steered by untrusted content, can read, modify, or drop SQLite data while bypassing read-only mode and write approval.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Model Context Protocol

Related items

• InfoThe ADLC maturity model: 5 stages of agentic development security | Endor LabsSimilar attack · Endor Labs Blog
• HighGHSA-m65p-9j7q-6w33: MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceSimilar attack · GitHub Advisory Database
• CriticalGHSA-26p8-2jq9-3vq9: MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modulesSimilar attack · GitHub Advisory Database
• MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSimilar attack · GitHub Advisory Database
• MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSimilar attack · GitHub Advisory Database