https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T09:15:30.359237+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-108604 fkie_cve-2026-108604 2026-10-11T09:15:30.657272+00:00

Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.

 https://vulnerability.circl.lu/vuln/ghsa-jj9h-m6r9-g37h GHSA-jj9h-m6r9-g37h 2026-10-11T09:15:30.657377+00:00

Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.