DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution
### Summary DBHub `0.21.2` exposes an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example `--transport http --port 8080`. The HTTP server attempts to protect browser-origin access by checking whether the `Origin` hostname equals the `Host` hostname, then reflecting the validated `Origin` into `Access-Control-Allow-Origin`. This does not stop DNS rebinding. After an attacker-controlled hostname rebinds to a victim-accessible DBHub HTTP server, both `Origin` and `Host` can contain the attacker-controlled hostname, so DBHub accepts the request and dispatches MCP tool calls. As a result, a malicious website can deterministically invoke DBHub MCP tools from the victim's browser without prompt injection or model involvement. With the default demo configuration this can read and write the demo SQLite database; with a real configured database, the same primitive can read, enumerate, and potentially write database contents depending on DBHub's configured tool permissions and database credentials. Recommended severity: High. It may become Critical when HTTP transport is connected to production or broadly privileged database credentials. ### Details Affected target: - Package: `@bytebase/dbhub` - Version tested: `0.21.2` - Repository commit tested: `72adfdcf7bcfe46b25edbc776ce096006eba9b02` - Affected mode: HTTP transport (`--transport http`) - Default package transport: stdio - Not affected by this specific browser-origin vector: stdio tr
GHSA-fm8p-53ww-hf6w
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:GHSA-fm8p-53ww-hf6w
@bytebase/dbhub
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 0.22.5
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.22.5"
}
]
}
],
"package": {
"name": "@bytebase/dbhub",
"purl": "pkg:npm/%40bytebase/dbhub",
"ecosystem": "npm"
},
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-fm8p-53ww-hf6w/GHSA-fm8p-53ww-hf6w.json",
"last_known_affected_version_range": "<= 0.22.4"
}
}
]- Related CVEs
- CVE-2026-61742
Source reference:
/aliases
Publisher severity
critical
Source reference: /database_specific/severity
- Event
- #14226 · Revision 1
- Added to Heist Feed
- Publisher date