DBHub read-only mode bypass vulnerability CVE-2026-61788: versions before 0.22.6 can be written to, fixed in 0.22.6
DBHub read-only enforcement vulnerability (CVE-2026-61788)
AI summary
DBHub published a security advisory disclosing a read-only mode bypass vulnerability, CVE-2026-61788, affecting all versions before 0.22.6 (fixed in 0.22.6), covering both stdio and HTTP transports as well as PostgreSQL and SQLite. When read-only mode is enabled and running as a regular user, external parties can still write data through specific calls.
Why it was selected
公告给出受影响版本、可利用函数与修复 PR，部署 DBHub 或类似 MCP 数据库网关的团队可据此核对自身配置。