MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler
PYSEC-2026-3579 · CVE-2026-11529 · GHSA-mvq4-39wx-6h5g
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. Upgrading the affected component is advised.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-11529
- WEB https://github.com/designcomputer/mysql_mcp_server/issues/89
- WEB https://github.com/designcomputer/mysql_mcp_server/pull/86
- WEB https://github.com/designcomputer/mysql_mcp_server/commit/080bef9a96d625ce0dfbde573a08b93497871981
- PACKAGE https://github.com/designcomputer/mysql-mcp-server
- WEB https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.3.0
- WEB https://vuldb.com/cve/CVE-2026-11529
- WEB https://vuldb.com/submit/836490
- WEB https://vuldb.com/vuln/369146
- WEB https://vuldb.com/vuln/369146/cti
- PACKAGE https://pypi.org/project/mysql-mcp-server
- ADVISORY https://github.com/advisories/GHSA-mvq4-39wx-6h5g
Ready to move
Start Securing
Free, no credit card | First findings in minutes