CVE-2026-19333 in Supabase-MCP
Summary
by MITRE • 08/09/2026
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality of the component generate_types. The manipulation of the argument schema results in command injection. The attack needs to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 08/09/2026
The vulnerability identified in NightTrek Supabase-MCP represents a critical command injection flaw within the generate_types component functionality. This security weakness resides in the schema argument processing mechanism where improper input validation allows maliciously crafted arguments to be executed as system commands. The vulnerability specifically affects the database management and type generation capabilities of the Supabase-MCP framework, which is commonly used for managing database schemas and generating corresponding types for applications. The issue manifests when the system processes schema definitions that contain specially crafted payloads designed to trigger unintended command execution.
Technical exploitation of this vulnerability requires local access to the affected system since the attack vector operates through direct manipulation of the generate_types component functionality. The command injection occurs during the processing of schema arguments where user-supplied input is not properly sanitized or validated before being passed to underlying system commands. This flaw falls under the category of CWE-78, which specifically addresses OS Command Injection vulnerabilities in software systems. The attack surface is limited to local execution contexts where adversaries can directly interact with the component, making it less accessible than remote exploitation vectors but still presenting significant risk to systems where local access is compromised.
The operational impact of this vulnerability extends beyond simple command execution as it could potentially allow attackers to gain unauthorized access to system resources, escalate privileges, or extract sensitive data from the database environment. The affected Supabase-MCP component serves as a bridge between database schemas and application types, making it a critical integration point that could be leveraged for broader system compromise. Security professionals should note that this vulnerability represents a potential pathway for privilege escalation attacks, particularly in environments where the generate_types functionality is used with elevated privileges or when the system operates under trust relationships with other components.
Organizations utilizing this Supabase-MCP version should implement immediate mitigations including input validation and sanitization of all schema arguments before processing. The recommended approach involves implementing strict parameter validation, using whitelisting mechanisms for acceptable schema inputs, and ensuring proper escaping of command-line arguments when system calls are required. Additionally, access controls should be enforced to limit local execution privileges for components that process external schema definitions. Security monitoring should include detection of unusual command execution patterns and unauthorized access attempts to the generate_types functionality. The vulnerability demonstrates the importance of secure coding practices around input handling and command execution in database management tools, aligning with ATT&CK technique T1059.003 for command and scripting interpreter usage. Given that the project has not yet responded to the reported issue, organizations should consider implementing custom patches or alternative solutions until official updates are available to address this critical security gap.