CVE-2026-108604

Received Received - Intake

Incorrect Authorization in Tabularis MCP Run_Query Safety Gate Allows Data Modification

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: VulnCheck

Description

Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-10

Generated

2026-10-11

AI Q&A

2026-10-11

EPSS Evaluated

N/A

NVD

CVE-2026-108604

EUVD

EUVD-2026-96430

Affected Vendors & Products

Vendor	Product	Version / Range
TabularisDB	tabularis	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in Tabularis through 0.27.0 allows attackers to bypass read-only mode by submitting specially crafted SELECT statements that include side-effecting functions like setval, nextval, or query_to_xml with embedded DELETE commands. The flaw exists because the application incorrectly treats all SELECT statements as read-only, even when they modify data.

Detection Guidance

Check Tabularis version with 'tabularis --version' or inspect installed packages. Monitor for unusual SELECT statements containing setval, nextval, or query_to_xml functions in logs. Review MCP server queries for multi-statement payloads where the first keyword is SELECT followed by side-effecting operations.

Impact Analysis

An attacker could manipulate database sequences, delete data, or perform unauthorized modifications without triggering approval prompts. This could lead to data corruption, loss of integrity, or unauthorized access to sensitive information depending on the database permissions.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strict data integrity controls, such as GDPR's data protection principles or HIPAA's security rules for protecting health information. Unauthorized data modifications may result in non-compliance, potential fines, or legal consequences.

Mitigation Strategies

Upgrade Tabularis to the latest version beyond 0.27.0. Disable MCP server if not needed. Implement database-level read-only transactions for SELECT queries. Review and restrict database user permissions to limit impact of potential exploits.

Hi! I’m here to help you understand CVE-2026-108604. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70