Evidence · DiggingBeagle record
Tabularis SQLite MCP describe_table command SQL injection advisory
Maintainer advisory demonstrating stacked SQL risk in a nominally read-only metadata tool.
- Source role
- primary disclosure
Evidence record
Maintainer advisory demonstrating stacked SQL risk in a nominally read-only metadata tool.
Claim-level citations (2)
- supportsTabularis MCP read-only metadata tool could execute stacked SQLite statements: The Tabularis advisory reports SQL interpolation in describe_table metadata queries that may allow stacked statements through a nominal read-only MCP tool under the database connection privileges.
GHSA-xrx3-j98v-67x9: describe_table PRAGMA, stacked SQL and 0.28.0 fix
- supportsTabularis MCP read-only metadata tool could execute stacked SQLite statements: Tabularis interpolated the table_name argument into SQLite PRAGMA metadata queries that its SQL driver could execute as stacked statements. The tool caller needed access to describe_table; the user-facing workflow might have disallowed the separate write-capable run_query tool. Crafted metadata arguments could cross the nominal read-only MCP tool policy and issue statements through the same database connection.
GHSA-xrx3-j98v-67x9: describe_table PRAGMA, stacked SQL and 0.28.0 fix