CVE-2026-108604 TabularisDB CVE debrief

Who should care

Defenders responsible for Tabularis deployments, security teams assessing exposure to untrusted MCP clients or agents, and administrators of systems using Tabularis should be aware of this vulnerability. They should verify versions, assess exposure, and implement compensating controls to prevent unauthorized data modifications.

Why it matters

CVE-2026-108604 is a medium-severity vulnerability allowing unauthorized data modification in Tabularis through version 0.27.0. Defenders should verify versions, assess exposure, and implement controls to prevent unauthorized changes. Monitoring for specific types of SELECT statements is crucial.

• Potential unauthorized data modifications due to bypassed read-only mode.
• Need for verification of Tabularis versions in use.
• Requirement for compensating controls to prevent unauthorized changes.
• Importance of monitoring for side-effecting SELECT statements.

Technical summary

The vulnerability in Tabularis through version 0.27.0 arises from an incorrect authorization issue in the MCP run_query safety gate. This allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements, such as setval, nextval, or PostgreSQL query_to_xml with embedded DELETE, potentially modifying data without approval prompts. Affected product deployments should be identified and verified for exposure, with compensating controls implemented to prevent unauthorized data modifications.

Defensive priority

Defenders should prioritize verifying the versions of Tabularis in use, assessing exposure to untrusted MCP clients or agents, and implementing compensating controls to prevent unauthorized data modifications.

Recommended defensive actions

• Verify Tabularis versions in use and assess exposure to untrusted MCP clients or agents.
• Implement compensating controls to prevent unauthorized data modifications.
• Monitor for and restrict side-effecting SELECT statements.
• Review and update security configurations for MCP run_query safety gate.
• Perform asset inventory of systems using Tabularis to identify potential exposure.
• Review change management and rollback procedures for Tabularis deployments.
• Track and monitor for potential unauthorized data modifications.

Evidence notes

The CVE record and source references indicate a medium-severity vulnerability in Tabularis through version 0.27.0. The vulnerability allows unauthorized data modification by bypassing read-only mode. However, details about the exact versions affected, exploitation, or specific impacts are limited in the provided corpus.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.