Skip to content
OpenAdvisories

Vendor

TabularisDB

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3

    Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification

    Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run …