{"id":"EUVD-2026-86326","enisaUuid":"0827f4e4-31ab-303c-8fce-65b262f59b80","description":"DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly \u003d true` on the `execute_sql` tool does not make the connection read-only. The connectors are written to set PostgreSQL `default_transaction_read_only\u003don` (and open SQLite in `readOnly` mode), but that code is gated on a config value that is never populated, so it never runs. The only thing left enforcing read-only is a classifier that inspects the first keyword of each statement. Any `SELECT` that writes or has side effects through a function call passes it. With an ordinary role this allows sequence tampering; with a privileged role it allows writing arbitrary files on the server (`lo_export`), reading arbitrary host files (`pg_read_file`), and remote code execution (`dblink` + `COPY ... TO PROGRAM`). The HTTP transport is unauthenticated and binds to `0.0.0.0` by default, so this is reachable by any network caller of `/mcp`. Version 0.22.6 patches the issue.","datePublished":"Sep 24, 2026, 5:37:40 PM","dateUpdated":"Sep 29, 2026, 3:00:45 AM","baseScore":7.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/bytebase/dbhub/security/advisories/GHSA-mwwr-p57h-56pf\n","aliases":"CVE-2026-61788\nGHSA-mwwr-p57h-56pf\n","assigner":"GitHub_M","epss":0.4,"enisaIdProduct":[{"id":"dc8b0fc3-82de-37c2-876c-720f2d5f965a","product":{"name":"dbhub","vendor":{"name":"bytebase"}},"product_version":"\u003c 0.22.6"}],"enisaIdVendor":[{"id":"256efdeb-950b-3eea-a008-29e59a9da0f0","vendor":{"name":"bytebase"}}],"enisaIdVulnerability":[{"id":"098e492b-4be0-395a-9066-76881a1a5caa","vulnerability":{"id":"CVE-2026-61788","description":"DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly \u003d true` on the `execute_sql` tool does not make the connection read-only. The connectors are written to set PostgreSQL `default_transaction_read_only\u003don` (and open SQLite in `readOnly` mode), but that code is gated on a config value that is never populated, so it never runs. The only thing left enforcing read-only is a classifier that inspects the first keyword of each statement. Any `SELECT` that writes or has side effects through a function call passes it. With an ordinary role this allows sequence tampering; with a privileged role it allows writing arbitrary files on the server (`lo_export`), reading arbitrary host files (`pg_read_file`), and remote code execution (`dblink` + `COPY ... TO PROGRAM`). The HTTP transport is unauthenticated and binds to `0.0.0.0` by default, so this is reachable by any network caller of `/mcp`. Version 0.22.6 patches the issue.","datePublished":"Sep 24, 2026, 5:37:40 PM","dateUpdated":"Sep 29, 2026, 3:00:45 AM","status":"PUBLISHED","baseScore":7.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/bytebase/dbhub/security/advisories/GHSA-mwwr-p57h-56pf\n","enisa_id":"EUVD-2026-86326\n","assigner":"GitHub_M","epss":0.4,"dataProcessed":"Nov 11, 2026, 7:20:09 AM","vulnerabilityProduct":[{"id":"e1ba8bc6-deb5-315e-b531-7e294dce1783","product":{"name":"dbhub","vendor":{"name":"bytebase"}},"product_version":"\u003c 0.22.6"}],"vulnerabilityVendor":[{"id":"04aff5e6-cb16-35ab-9d2a-331d615eda10","vendor":{"name":"bytebase"}}]}},{"id":"dbb88247-53dd-34fa-9261-2ab2b3c547b2","vulnerability":{"id":"GHSA-mwwr-p57h-56pf","description":"@bytebase/dbhub\u0027s read-only mode does not prevent database writes","datePublished":"Sep 24, 2026, 7:37:59 PM","dateUpdated":"Sep 24, 2026, 7:38:00 PM","baseScore":0.0,"references":"https://github.com/bytebase/dbhub/security/advisories/GHSA-mwwr-p57h-56pf\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-61788\nhttps://github.com/bytebase/dbhub/pull/342\nhttps://github.com/bytebase/dbhub/commit/872bb338f7d31f6afe517a076ac3e3edafaaaf08\nhttps://github.com/bytebase/dbhub\nhttps://github.com/bytebase/dbhub/releases/tag/v0.22.6\n","enisa_id":"EUVD-2026-86326\n","aliases":"GHSA-mwwr-p57h-56pf\nCVE-2026-61788\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:53:48 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}