CVE-2026-108604: Incorrect Authorization in TabularisDB tabularis
Description
TabularisDB's tabularis component up to version 0.27.0 has an incorrect authorization vulnerability in the MCP run_query safety gate. This flaw allows untrusted or prompt-injected MCP clients to bypass read-only restrictions by submitting SELECT statements that cause side effects, such as data modification. Attackers can exploit this to run PostgreSQL functions embedding data-altering commands without approval prompts.
CVSS v4.0
Score 5.8medium
Affected software
TabularisDB
tabularis
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-108604 describes an incorrect authorization vulnerability in TabularisDB's tabularis (versions up to 0.27.0). The vulnerability exists in the MCP run_query safety gate, which is intended to enforce read-only mode. However, attackers controlling prompt-injected agents or untrusted MCP clients can bypass this restriction by submitting SELECT statements that have side effects, such as invoking PostgreSQL functions like setval, nextval, or query_to_xml with embedded DELETE commands. This allows unauthorized modification of data without triggering approval prompts.
Potential Impact
Exploitation of this vulnerability enables attackers to modify database data without proper authorization or approval prompts, violating data integrity and potentially leading to unauthorized data changes. The CVSS 4.0 score of 5.8 indicates a medium severity impact with partial attack complexity and required privileges, but significant impact on data integrity and availability.
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to MCP clients and avoid using untrusted prompt-injected agents. Monitor for unusual query patterns that may indicate exploitation attempts.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-10T19:06:44.591Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aca9a362cdf04f6564c3048
Added to database: 10/10/2026, 20:04:06 UTC
Last enriched: 10/10/2026, 20:18:43 UTC
Last updated: 10/10/2026, 20:18:58 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.