CVE-2026-46374 is a vulnerability in SQLFluff parser versions from 0.8.2 up to but not including 4.2.0 that allows an untrusted user to cause a Denial of Service (DoS) by submitting a maliciously long SQL query. This triggers uncontrolled resource consumption during parsing. The issue is addressed in version 4.2.0 and later, which introduces a configurable parse node limit enabled by default to prevent such exploits.