ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP `run_sql_readonly` tool violates its documented read-only contract for MySQL …
High CVSS 7.5
Summary
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP `run_sql_readonly` tool violates its documented read-only contract for MySQL targets. The tool validates only the full input string with a substring blacklist and first-keyword allowlist, but then executes the entire SQL string on a backend connection created with `CLIENT_MULTI_STATEMENTS`. As a result, a caller can submit a read-only first statement followed by a side-effec…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/sysown/proxysql/commit/e32b7fd50c7c234ea628e392e621e09a2a919e08 Patch
- https://github.com/sysown/proxysql/security/advisories/GHSA-7wh6-2vcc-gcm4 Exploit
- https://github.com/sysown/proxysql/security/advisories/GHSA-7wh6-2vcc-gcm4 Exploit
Timeline
- nvd_ingest NVD