CVE-2026-119586

The SQLite command-line shell (versions through 3.54.1 ) is vulnerable to a command injection flaw within the .recover command. The root cause is that the command emits dot-commands stored in sqlite_schema.sql values verbatim. An attacker can craft a database where the schema contains a valid CRE...