CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377

SQLite versions prior to 3.54.0 are vulnerable to an authorization bypass in the lookupName() function. The root cause is that the authorizer is only invoked for the USING column of the first joined table. This allows an attacker to execute SQL queries that bypass sqlite3_set_authorizer() SQLITE_...

EUVD-2026-113788

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

PT-2026-133461

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3 set authorizer SQLI...