Vulnerability · Published Oct 28, 2026 · Assigned by VulnCheck

CVE-2026-118378Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

High 7.8

In plain English

A high-severity SQL injection in tabularis from TabularisDB. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 95.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI agents steered by untrusted content, can close the quoted PRAGMA argument and append statements to read, modify, or drop SQLite data, bypassing read-only mode and write approval.

Affected products (as reported)

Vendor	Product	Versions
TabularisDB	tabularis	0.10.0 – before 0.28.0

Weakness: CWE-89 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-xrx3-j98v-67x9) vendor-advisory
https://github.com/TabularisDB/tabularis/commit/fd1bdbbae35e5367c32d1e7fe9c44cb1b6875d74 patch
https://github.com/TabularisDB/tabularis/blob/804c4c3bb6fd8eaa2e36cbe49f6c0d58f373b5e9/src-tauri/src/drivers/sqlite/mod.rs#L92-L105 technical-description
tabularis v0.28.0 Release Notes release-notes
https://github.com/TabularisDB/tabularis product
VulnCheck Advisory: Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name third-party-advisory