Summaryinfo

A vulnerability marked as critical has been reported in pab1it0 adx-mcp-server up to 1.1.0. Impacted is the function get_table_schema/sample_table_data/get_table_details. The manipulation of the argument table_name leads to data query logic injection. This vulnerability is traded as CVE-2026-33980. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability was found in pab1it0 adx-mcp-server up to 1.1.0 and classified as critical. This issue affects the function get_table_schema/sample_table_data/get_table_details. The manipulation of the argument table_name with an unknown input leads to a data query logic injection vulnerability. Using CWE to declare the problem leads to CWE-943. The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL (Kusto Query Language) injection vulnerabilities in three MCP tool handlers: `get_table_schema`, `sample_table_data`, and `get_table_details`. The `table_name` parameter is interpolated directly into KQL queries via f-strings without any validation or sanitization, allowing an attacker (or a prompt-injected AI agent) to execute arbitrary KQL queries against the Azure Data Explorer cluster. Commit 0abe0ee55279e111281076393e5e966335fffd30 patches the issue.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-33980 since 03/24/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details are known, but no exploit is available.

Applying the patch 0abe0ee55279e111281076393e5e966335fffd30 is able to eliminate this problem. The bugfix is ready for download at github.com.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• pab1it0

Name

• adx-mcp-server

Version

• 1.0
• 1.1.0

License

• open-source

Website

• Product: https://github.com/pab1it0/adx-mcp-server/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion