Read the docs

TabularisDB

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

TabularisDB records in CISA KEV

No TabularisDB vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-81666 CVE-2026-118378 · GHSA-v867-6qx2-gwmg

Tabularis SQL Injection via MCP describe_table table_name

Priority HIGH 72

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00151 Published 2026-10-28 Fixed in 0.28.0 CWE-89
TI-2026-70587 CVE-2026-108604 · GHSA-jj9h-m6r9-g37h

Read-only bypass in Tabularis MCP run_query via SELECT statements

Priority MEDIUM 61

Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effectin…

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.002 Published 2026-10-10 No fix listed CWE-863
Open these records in search →