CVE-2026-7206 json
dubydu sqlite-mcp entry.py extract_to_json sql injection
published 2026-04-28 6 mo ago modified 2026-07-24 3 mo ago also GHSA-4j28-22qp-rjcf , PYSEC-2026-3074 , EUVD-2026-25963
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 20%
- public exploits
- 0
- none known
Summary
A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_json of the file src/entry.py. Performing a manipulation of the argument output_filename results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The patch is named a5580cb992f4f6c308c9ffe6442b2e76709db548. Applying a patch is the recommended action to fix this issue.
Patch / fix
- github.com/dubydu/sqlite-mcp@a5580cb commit
- github.com/dubydu/sqlite-mcp#2 pull request
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 6 mo ago
Exploit prediction
0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/dubydu/sqlite-mcp/issues/1 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C |
| CNA | 3.0 | 7.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C |
| CNA | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C |
| CNA | 4.0 | 5.5 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| GitHub | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| OSV | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | sqlite-mcp | <=0.1.0 |
no fix listed |
Affected products
- dubydu sqlite-mcp
Classification
References
-
github.com
/dubydu/sqlite-mcp/pull/2
issue-tracking, patch, web
-
github.com
/dubydu/sqlite-mcp/commit/a5580cb992f4f6c308c9ffe6442b2e76709db548
patch, web
-
github.com
/dubydu/sqlite-mcp/issues/1
exploit, issue-tracking, web
-
vuldb.com
/vuln/359806
vdb-entry, technical-description, web
-
vuldb.com
/vuln/359806/cti
signature, permissions-required, web
-
vuldb.com
/submit/802081
third-party-advisory, web
-
github.com
/dubydu/sqlite-mcp/
product
-
nvd.nist.gov
/vuln/detail/CVE-2026-7206
advisory
-
github.com
/dubydu/sqlite-mcp
package
-
pypi.org
/project/sqlite-mcp
package
-
github.com
/advisories/GHSA-4j28-22qp-rjcf
advisory
Sources
- CVE List CVE-2026-7206
- GitHub Advisory GHSA-4j28-22qp-rjcf
- NVD CVE-2026-7206
- OSV PYSEC-2026-3074
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.