VYPR

tabularis

by TabularisDB

CVEs (1)

  • CVE-2026-108604MedOct 10, 2026
    risk 0.41cvss 6.3epss —

    Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like…