{"vulnerability": "cve-2026-108604", "sightings": [{"uuid": "075a97d5-f43c-44c0-bc7d-f074e4ee13c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108604", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418645141352613", "content": "CVE-2026-108604 Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108604https://hackmd.io/@haind/S1BofaIsMxhttps://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/ai_activity.rs#L357-L416https://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/mcp/mod.rs#L1136-L1171https://github.com/TabularisDB/tabularishttps://www.vulncheck.com/advisories/tabularis-through-0.27.0-read-only-bypass-via-mcp-run-query-select-classification#TabularisDB #tabularis#CVE_2026_108604#bot", "creation_timestamp": "2026-10-10T21:05:38.691937Z"}]}