CVE-2026-11529: designcomputer mysql-mcp-server SQL injection in read_resource

Executive brief

The MySQL MCP Server, a tool used for managing MySQL database connections via the Model Context Protocol, is vulnerable to SQL injection. An attacker with basic network access can send specially crafted requests that trick the server into executing unauthorized database commands. This could lead to the unauthorized viewing, modification, or deletion of sensitive data stored in the connected MySQL databases.

Technical details

A SQL injection vulnerability exists in mysql-mcp-server versions prior to 0.3.0. The flaw is located in the `read_resource` function within `src/mysql_mcp_server/server.py`, which fails to properly sanitize the `uri_str` argument used by the mysql URI handler. A remote attacker with low privileges can exploit this by providing a malicious URI string, leading to unauthorized database queries. The vulnerability has been patched in version 0.3.0 by improving input neutralization. Public exploit details have been disclosed.

Affected products

• designcomputer mysql-mcp-server < 0.3.0

Timeline

• 2026-06-08: disclosed
• 2026-06-08: advisory
• 2026-07-24: patched: GitHub advisory reviewed and updated with patch details.

References

• https://api.github.com/users/faketut
• https://github.com/faketut
• https://api.github.com/users/faketut/gists%7B/gist_id%7D
• https://api.github.com/users/faketut/repos
• https://avatars.githubusercontent.com/u/104810086?v=4
• https://api.github.com/users/faketut/events%7B/privacy%7D