43 matches found
GHSA-VPHC-468G-8RFP Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries
Summary adx-mcp-server ListDictstr, Any: client = getkustoclient query = f"tablename | getschema" ListDictstr, Any: client = getkustoclient query = f"tablename | sample samplesize" ListDictstr, Any: client = getkustoclient query = f".show table tablename details" -- KQL injection resultset =...
Azure Data Explorer MCP Server 安全漏洞
The Azure Data Explorer MCP Server is a connection protocol server developed by Pavel Shklovsky, designed to connect AI assistants with data warehouses. Versions of the Azure Data Explorer MCP Server prior to 0.1.1 contain security vulnerabilities. These vulnerabilities stem from the tablename...
PT-2026-28582
Name of the Vulnerable Software and Affected Versions Azure Data Explorer MCP Server versions prior to commit 0abe0ee55279e111281076393e5e966335fffd30 Azure Data Explorer MCP Server versions up to and including 0.1.1 Description Azure Data Explorer MCP Server, a Model Context Protocol MCP server,...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
Azure Data Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
PT-2026-4309
Name of the Vulnerable Software and Affected Versions Azure Data Explorer affected versions not specified Description An issue exists in Azure Data Explorer that allows an unauthorized attacker to disclose sensitive information over a network. The issue involves the exposure of sensitive...
Microsoft Azure Data Explorer information leakage vulnerability
Microsoft Azure Data Explorer is a cloud-native data platform developed by the American company Microsoft. There is an information leakage vulnerability present in Microsoft Azure Data Explorer. Attackers can exploit this vulnerability to leak information through the network...
EUVD-2022-28343
Malicious code in bioql PyPI...
Malicious code in azure-data-explorer-datasource (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 472db0b9f7a8b98e15b4d7781f687b3418035ddb8c5f55f1b73d6ca8c4911a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5764 Malicious code in azure-data-explorer-datasource (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 472db0b9f7a8b98e15b4d7781f687b3418035ddb8c5f55f1b73d6ca8c4911a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the Azure Data Explorer data analysis service, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Azure Data Explorer data analysis service is related to errors in information representation by the user interface. Exploiting this vulnerability may allow attackers to perform spear-phishing attacks remotely...
CVE-2022-23256
Azure Data Explorer Spoofing Vulnerability...
CVE-2022-23256
Azure Data Explorer Spoofing Vulnerability...
