HighVulnerabilityLLM-specific
CVE-2026-61789: DBHub read-only SQL validation bypass on MySQL and MariaDB connectors
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-61789
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
DBHub, a database MCP server, versions prior to 0.22.6 contain a flaw where read-only SQL validation can be bypassed on its MySQL and MariaDB connectors. The `scanSingleLineComment` function in `src/utils/sql-parser.ts` treats any double dash as a comment, while MySQL and MariaDB require following whitespace, so a hidden write or DDL statement evades `isReadOnlySQL` and still executes with `multipleStatements` enabled. An attacker who can influence the assistant's SQL, including via prompt injection, can modify or drop data within the database account's privileges. PostgreSQL is not affected.
Mitigation
Fixed in version 0.22.6.
Topics
Related items
- HighCVE-2026-63378: TAKO AI Agent for Okta code execution via execute-script endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-63377: TAKO AI Agent for Okta unauthenticated admin account creation via setup endpointSimilar attack · NVD/CVE Database
- HighCVE-2026-119337: RAGFlow agent chat completions API bypasses access check on private agentsSimilar attack · NVD/CVE Database
- MediumCVE-2026-119328: Immich unauthenticated /predict endpoint allows arbitrary cache deletionSimilar attack · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSimilar attack · NVD/CVE Database