High
@bytebase/dbhub's read-only mode does not prevent database writes
Type: advisorySource: Official CVE List
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting readonly = true on the execute_sql tool does not make the connection read-only. The connectors…
Products: dbhubCVEs: CVE-2026-61788