CVE-2026-48017
8.8 · High
Remote code execution in DbGate through the loadReader endpoint
Any authenticated DbGate user could inject JavaScript into a script the server forks, then escape the require = null sandbox with process.binding.
Domain
Data platforms
Orchestrators, database clients, notebooks and warehouses.
4 write-ups, 4 vulnerabilities
CVE-2026-40864
Highlighted 5.4 · Medium
XSRF bypass in JupyterHub through Sec-Fetch-Mode: no-cors requests
JupyterHub 4.1.0 to 5.4.4 skipped its XSRF check for any no-cors request, so a page on another origin could submit Hub forms for a logged-in user.
CVE-2026-41490
8.3 · High
SQL injection in Dagster database I/O managers through dynamic partition keys
Dagster’s DuckDB, Snowflake, BigQuery and DeltaLake I/O managers copied dynamic partition keys into SQL, so adding a partition was enough to inject queries.
CVE-2026-33980
8.3 · HighKQL injection in Azure Data Explorer MCP Server through table_name
Three metadata tools of adx-mcp-server pasted table_name into KQL, letting an agent run arbitrary queries without going through execute_query.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-48017 | DbGate | Code injection in loadReader through functionName | 8.8 High | |
| CVE-2026-40864 | JupyterHub | XSRF bypass for no-cors requests | 5.4 Medium | |
| CVE-2026-41490 | Dagster | SQL injection through dynamic partition keys in database I/O managers | 8.3 High | |
| CVE-2026-33980 | Azure Data Explorer MCP Server | KQL injection through table_name in three metadata tools | 8.3 High |