sqlite-mcp up to version 0.1.0 contains a SQL injection vulnerability in the extract_to_json function within src/entry.py. This flaw allows remote attackers to manipulate the output_filename argument to execute arbitrary SQL commands. A public exploit is available, increasing the risk of attacks. A patch identified by commit a5580cb992f4f6c308c9ffe6442b2e76709db548 has been released to address this issue.