Tools AI Risk Radar ai-incident-0198
Incident record
Tabularis MCP can approve database writes as reads
- Severity
- Medium
- Status
- Research
- Type
- Infra Vuln
- Target
- Tabularis through 0.27.0
- Actor
- researcher
- CVE
- CVE-2026-108604
What happened
Tabularis classifies SQL starting with SELECT as a read even when the statement changes database state. An agent can therefore bypass its read-only control and write-approval prompt.
The CVE was published on 10 October; the original researcher publication date is unconfirmed. An untrusted MCP caller or prompt-injected agent must submit the statement. The database connection’s own privileges still govern the resulting operation. The CNA gives CVSS 3.1 score 6.3. Patch status remains unconfirmed as of 11 October.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-108604
- Researcher disclosurehackmd.io/@haind/S1BofaIsMx
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026