# CVE-2026-47252: Anyquery AppleScript and JXA code injection in macOS browser plugins

Source: https://junglewise.ai/threats/cve-2026-47252-anyquery-applescript-and-jxa-code-injection-in-macos-browser  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-17. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-47252 · Severity: critical · CVSS 9 · Published 2026-09-17

Anyquery is a tool that allows users to run SQL queries against various data sources, including browser tabs. A vulnerability in its macOS browser plugins allows an attacker to execute arbitrary commands on the host computer by providing a specially crafted URL. This could lead to full system compromise, unauthorized access to files, and theft of sensitive information stored in the macOS keychain.

Vendors: [Go](https://junglewise.ai/threats/vendors/go), [Julien040](https://junglewise.ai/threats/vendors/julien040).

## Quick answers

**Is CVE-2026-47252 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47252 being exploited in the wild.

**How severe is CVE-2026-47252?** Critical severity, with a CVSS score of 9, published 17 September 2026.

**Which products and versions are affected?** github.com/julien040/anyquery/plugins/brave (Go) < 0.0.0-20240826075852-c651df0b8767, SEMVER:introduced=0,fixed=0.0.0-20240826075852-c651df0b8767; github.com/julien040/anyquery/plugins/chrome (Go) < 0.0.0-20240826075852-c651df0b8767, SEMVER:introduced=0,fixed=0.0.0-20240826075852-c651df0b8767; github.com/julien040/anyquery/plugins/edge (Go) < 0.0.0-20240826075852-c651df0b8767, SEMVER:introduced=0,fixed=0.0.0-20240826075852-c651df0b8767; github.com/julien040/anyquery/plugins/safari (Go) < 0.0.0-20240826075852-c651df0b8767, SEMVER:introduced=0,fixed=0.0.0-20240826075852-c651df0b8767; and 4 more.

**Is there a fix for CVE-2026-47252?** Yes. github.com/julien040/anyquery/plugins/brave (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later; github.com/julien040/anyquery/plugins/chrome (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later; github.com/julien040/anyquery/plugins/edge (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later; github.com/julien040/anyquery/plugins/safari (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-47252 attacked?** It is attacked over the network or with local access, in a software library.

**Am I affected by CVE-2026-47252?** Check whether you run github.com/julien040/anyquery/plugins/brave (Go), github.com/julien040/anyquery/plugins/chrome (Go), github.com/julien040/anyquery/plugins/edge (Go) or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/julien040/anyquery/plugins/brave (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later

  ```sh
  go get github.com/julien040/anyquery/plugins/brave@v0.0.0-20240826075852-c651df0b8767
  ```

- github.com/julien040/anyquery/plugins/chrome (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later

  ```sh
  go get github.com/julien040/anyquery/plugins/chrome@v0.0.0-20240826075852-c651df0b8767
  ```

- github.com/julien040/anyquery/plugins/edge (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later

  ```sh
  go get github.com/julien040/anyquery/plugins/edge@v0.0.0-20240826075852-c651df0b8767
  ```

- github.com/julien040/anyquery/plugins/safari (Go): upgrade to 0.0.0-20240826075852-c651df0b8767 or later

  ```sh
  go get github.com/julien040/anyquery/plugins/safari@v0.0.0-20240826075852-c651df0b8767
  ```


## Technical details

A code injection vulnerability exists in the Anyquery browser plugins (Chrome, Brave, Edge, Safari) for macOS. The vulnerability is caused by the improper neutralization of special characters in a SQL-controlled URL value before it is interpolated into an AppleScript or JXA template. Specifically, the `Insert` and `Update` functions in `plugins/chrome/tabs.go` use `fmt.Sprintf` to embed the URL directly into a script string, which is then executed via `osascript`. An attacker with the ability to execute SQL commands (via local CLI or the HTTP interface) can use newline characters and quotes to break out of the intended script logic and execute arbitrary AppleScript commands, such as `do shell script`. This allows for arbitrary command execution with the privileges of the Anyquery process. The issue is addressed in version 0.0.0-20240826075852-c651df0b8767.

## Affected products

- julien040 anyquery/plugins/chrome < 0.0.0-20240826075852-c651df0b8767
- julien040 anyquery/plugins/brave < 0.0.0-20240826075852-c651df0b8767
- julien040 anyquery/plugins/edge < 0.0.0-20240826075852-c651df0b8767
- julien040 anyquery/plugins/safari < 0.0.0-20240826075852-c651df0b8767

## Identifiers

- CVE-2026-47252
- GHSA-hrj8-hjv8-mgwc
- GO-2026-5436

## Timeline

- 2026-06-07: disclosed
- 2026-06-08: advisory

## References

- [https://api.github.com/users/232-323](https://api.github.com/users/232-323)
- [https://github.com/232-323](https://github.com/232-323)
- [https://api.github.com/users/232-323/gists%7B/gist_id%7D](https://api.github.com/users/232-323/gists%7B/gist_id%7D)
- [https://api.github.com/users/232-323/repos](https://api.github.com/users/232-323/repos)
- [https://avatars.githubusercontent.com/u/196280629?v=4](https://avatars.githubusercontent.com/u/196280629?v=4)
- [https://api.github.com/users/232-323/events%7B/privacy%7D](https://api.github.com/users/232-323/events%7B/privacy%7D)