Skip to content
OpenAdvisories

Vendor

sysown

4 known vulnerabilities.

Products

proxysql 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-102664

    ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path

    ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress_mysql_payload() in lib/mysql_data_stream.cpp accepts a zlib stream when uncompress() returns Z_OK without checking that the actual output lengt…

    sysown proxysql
  • High 7.5
    CVE-2026-48774

    ProxySQL MCP run_sql_readonly executes side-effecting MySQL multi-statements despite read-only contract

    ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP `run_sql_readonly` tool violates its documented read-only contract for MySQL targets. The tool validates only the full input string with …

    sysown proxysql