{"id":"CVE-2026-108604","summary":"Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification","details":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.","modified":"2026-10-12T02:45:12.397036269Z","published":"2026-10-10T19:54:37.564Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108604.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-863"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108604.json"},{"type":"ADVISORY","url":"https://hackmd.io/@haind/S1BofaIsMx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108604"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/tabularis-through-0.27.0-read-only-bypass-via-mcp-run-query-select-classification"},{"type":"PACKAGE","url":"https://github.com/TabularisDB/tabularis"},{"type":"ARTICLE","url":"https://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/ai_activity.rs#L357-L416"},{"type":"ARTICLE","url":"https://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/mcp/mod.rs#L1136-L1171"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tabularisdb/tabularis","events":[{"introduced":"0"},{"fixed":"804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"0"},{"last_affected":"0.27.0"},{"fixed":"0.27.0"}]}}],"versions":["nightly-20261008-5a616f9","nightly-20261006-c0fe758","nightly-20261002-b78a409","nightly-20261001-ec45851","nightly-20260930-ff4c5e4","nightly-20260929-8d94624","nightly-20260929-b5f81cc","nightly-20260928-44a112e","nightly-20260924-32b8ee5","nightly-20260923-ef21476","nightly-20260922-65baceb","nightly-20260922-72895f9","nightly-20260921-e5ce805","nightly-20260921-d044381","nightly-20260919-d044381","nightly-20260918-992d969","v0.24.0","nightly-20260917-0ba519d","nightly-20260916-c2f0a0a","nightly-20260915-59da635","v0.23.0","nightly-20260911-1583a64","nightly-20260912-1bae5d7","nightly-20260910-809b135","nightly-20260904-d470693","nightly-20260903-bbbb798","v0.22.0","nightly-20260902-2881415","nightly-20260901-6c01c99","nightly-20260831-38187c2","nightly-20260828-9e6975a","v0.21.0","nightly-20260826-dd544ca","nightly-20260825-cb276c8","nightly-20260823-45745fc","nightly-20260822-1ffafa2","nightly-20260820-9ee8406","nightly-20260819-4f415ad","v0.20.0","nightly-20260816-5b1abe3","nightly-20260815-b39f1ce","nightly-20260814-dc778ed","nightly-20260813-356ce3f","nightly-20260812-e800618","v0.19.0","nightly-20260811-f143f73","nightly-20260808-59742aa","nightly-20260806-6fe4230","nightly-20260805-cc4c08a","nightly-20260804-54d9eae","v0.18.0","nightly-20260803-fcee3d5","nightly-20260802-38afd0f","nightly-20260801-5110f3e","nightly-20260731-a7a221c","nightly-20260730-c41a3b8","nightly-20260729-946f3db","nightly-20260728-81ffa0e","v0.17.0","nightly-20260727-1327328","nightly-20260726-1ad3b8d","nightly-20260725-6288eea","nightly-20260724-a94f626","nightly-20260723-c43c37b","nightly-20260722-1fb13f1","v0.16.0","nightly-20260721-4b6fae0","nightly-20260718-e8e729c","nightly-20260717-bdc676a","v0.15.0","v0.14.0","v0.13.4","v0.13.3","v0.13.2","v0.13.1","v0.13.0","v0.12.0","v0.11.0","v0.10.3","v0.10.2","v0.10.1","v0.9.21","v0.9.20","v0.9.19","v0.9.18","v0.9.17","v0.9.15","v0.9.14","v0.9.13","v0.9.12","v0.9.11","v0.9.10","v0.9.9","v0.9.8","v0.9.7","v0.9.6","v0.9.5","v0.9.2","v0.9.1","v0.9.0","v0.8.15","v0.8.14","v0.8.13","v0.8.12","v0.8.11","v0.8.10","v0.8.9","v0.8.8","v0.8.7","v0.8.6","v0.8.5","v0.8.4","v0.8.2","v0.8.1","v0.7.1","v0.7.0","v0.6.1","v0.6.0","v0.5.0","v0.4.0","v0.3.0","v0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108604.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"}]}