OS Command Injection Vulnerability in dbcli mycli by dbcli
CVE-2026-116053

4.8MEDIUM

Key Information:

Vendor

Dbcli

Status
Mycli
Vendor
CVE Published:
25 October 2026

What is CVE-2026-116053?

A vulnerability in the dbcli mycli application has been detected, specifically within the function source_special_command_is_safe in the Whitelist component. This issue allows for potential OS command injection. An attacker could exploit this flaw on the local host, manipulating the input to inject malicious commands. Public exploitation references have already surfaced, highlighting the urgency for users to assess their systems for possible exposures. Despite prior notifications, the vendor has yet to issue a response regarding this vulnerability, leaving users at risk.

Affected Version(s)

mycli 2.29.0

mycli 2.29.1

mycli 2.29.2

References

https://vuldb.com/vuln/426137
vdb-entrytechnical-description
https://vuldb.com/vuln/426137/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116053
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VulDB CNA Team
.