Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-50006 · CVE overview and exploitation status

EUVD-2026-77809

GHSA-xrcf-6jh3-ggvx

GO-2026-5979

cve-program · CVE-2026-50006

• https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5

euvd · EUVD-2026-77809

• https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5

nvd · CVE-2026-50006

• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5
• https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx

osv · GHSA-xrcf-6jh3-ggvx

• https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
• https://github.com/julien040/anyquery
• https://github.com/julien040/anyquery/releases/tag/0.4.5

osv · GO-2026-5979

• https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
• https://github.com/julien040/anyquery/releases/tag/0.4.5

No related changes are available here.