CVE-2026-48774

creationtimestamp| type| source ---|---|--- 2026-06-19 22:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moodtrcp2c2g...

CVE-2026-48774

ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP runsqlreadonly tool violates its documented read-only contract for MySQL targets. The tool validates only the full input string with a substring blacklist and first-keyword...