DBHub database MCP server: CVSS 9.3 DNS-rebinding bug let any website call its tools, and readonly=true never made connections read-only

GitHub Security Advisory / NVD·high signalXBlueskyLinkedInCopy link

CVE-2026-61742 (9.3) affects DBHub before 0.22.5 in its documented HTTP transport mode. The server compared the Origin hostname with the Host hostname and then reflected Origin back, so after a DNS rebind a malicious web page can call execute_sql from the victim's browser with no prompt injection involved. CVE-2026-61788 (7.4, fixed in 0.22.6) shows that `readonly = true` on execute_sql did not make the underlying connection read-only. Both were published 2026-09-24. Anyone running DBHub over HTTP against a real Postgres, MySQL or SQL Server database should upgrade and use a database user that only has read grants instead of trusting the flag.