---
id: CVE-2026-61789
title: >-
  DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL
  validation
summary: >-
  DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle,
  MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on
  the MySQL and MariaDB connectors. In `src/utils/sql-parser.ts`,
  `scanSingleLineComment`…
severity: medium
cvss: 6.1
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-436
  - CWE-863
vendor: bytebase
product: dbhub
affected:
  - dbhub < 0.22.6
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T16:08:24.224Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-61789'
references:
  - url: 'https://github.com/bytebase/dbhub/security/advisories/GHSA-j656-3hf2-fvjc'
    label: 'https://github.com/bytebase/dbhub/security/advisories/GHSA-j656-3hf2-fvjc'
  - url: 'https://github.com/bytebase/dbhub/pull/342'
    label: 'https://github.com/bytebase/dbhub/pull/342'
  - url: >-
      https://github.com/bytebase/dbhub/commit/872bb338f7d31f6afe517a076ac3e3edafaaaf08
    label: >-
      https://github.com/bytebase/dbhub/commit/872bb338f7d31f6afe517a076ac3e3edafaaaf08
  - url: 'https://github.com/bytebase/dbhub/releases/tag/v0.22.6'
    label: 'https://github.com/bytebase/dbhub/releases/tag/v0.22.6'
tags:
  - cve.org
epss: 0.00385
epssPercentile: 0.32719
ingestedAt: '2026-11-05T16:24:31.057Z'
---

## Overview

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL and MariaDB connectors. In `src/utils/sql-parser.ts`, `scanSingleLineComment` treats every double dash as a comment start, whereas MySQL and MariaDB require following whitespace, a control character, or the end of the line. The read-only check in `src/tools/execute-sql.ts` validates split statements with `isReadOnlySQL`, but `src/connectors/mysql/index.ts` and `src/connectors/mariadb/index.ts` execute the original string with `multipleStatements` enabled. A double dash followed by a non-whitespace character can therefore hide a subsequent write or destructive DDL statement from the validator while the database interprets the dashes as minus operators and executes both statements. Anyone able to influence the assistant's SQL, including through prompt injection in content the assistant reads, can bypass read-only mode to modify or drop database data, subject to the database account's privileges. PostgreSQL is not affected by this path because its double-dash parsing agrees with the checker and its connector executes individual split statements. This issue is fixed in version 0.22.6.

## Affected

- `dbhub < 0.22.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.