PatchSiren

dbcli CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM dbcli CVE published 2026-10-25

CVE-2026-116053

A weakness in dbcli mycli up to 2.29.4/2.30.1 allows for os command injection via the source_special_command_is_safe function in mycli/packages/special/source.py. The attack can be launched on the local host and a public exploit is available. This vulnerability impacts mycli installations, allowing attackers to execute arbitrary commands on the system. Defenders should assess exposure and prioritize remed [truncated]