CVE-2026-7591

Vulnerability

Details

CVE-2026-7591 describes an SQL injection vulnerability in the TimBroddin/astro-mcp-server project, affecting versions up to 1.1.1. The flaw resides in src/index.ts, where multiple MCP tools—such as search_rankings—accept user-controlled parameters (e.g., keyword, store, appName, appId) and directly interpolate them into SQLite query strings executed by db.exec() without proper sanitization [1][2]. This constitutes a classic CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) [2].

Exploitation

An attacker with network access to the MCP interface can craft malicious values for these parameters and send them to any of the affected tools. The attack is remotely exploitable and does not require authentication [2]. The vulnerability was reported via a GitHub issue on April 14, 2026, and a public exploit has since been released [2].

Impact

Successful exploitation allows the attacker to bypass intended filters, extract arbitrary data from the local Astro ASO database, and alter query semantics. This could lead to unauthorized disclosure of app ranking data, keyword trends, and other sensitive information stored in the SQLite database [2].

Mitigation

As of the publication date, no fixed version has been released. The project maintainer was informed through an issue report but has not responded [2]. Users are advised to restrict network access to the MCP server, disable the service if not required, or implement a reverse proxy with input validation until a patch becomes available.