CVE-2026-47252

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled URL into AppleScript or JXA source passed to osascript. In plugins/chrome/tabs.go, tabsTable.Insert() passes the URL through fmt.Sprintf(newTabScript, url), and tabsTable.Update() uses fmt.Sprintf(setURLScript, pk, url). A URL containing quote and newline characters can break out of the intended string or property record and append script statements, resulting in arbitrary command execution with the privileges of the anyquery process on the macOS host. This issue is fixed in version 0.4.5.

• CWE-94

• https://github.com/julien040/anyquery/commit/33769e03bd4b0f76d7a20a4188cce7153f6db1c9
• https://github.com/julien040/anyquery/releases/tag/0.4.5
• https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc
• https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc

Published

Sep 17, 2026

Last Modified

Sep 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47247libheif is a HEIF and AVIF file format decoder and encoder. …7.5
• CVE-2026-47248Parse Server is an open source backend that can be deployed …6.9
• CVE-2026-47249Klever-Go is the Go implementation of the Klever blockchain …7.5
• CVE-2026-4725Sandbox escape due to use-after-free in the Graphics: Canvas…10
• CVE-2026-47250mcp-server-kubernetes is a Model Context Protocol server for…6.1
• CVE-2026-47251libheif is a HEIF and AVIF file format decoder and encoder. …6.1
• CVE-2026-47253Anyquery is an SQL query engine built on top of SQLite. Prio…7.3
• CVE-2026-47254libheif is a HEIF and AVIF file format decoder and encoder. …6.1
• CVE-2026-47255AgenticMail gives AI agents real email addresses and phone n…8.2
• CVE-2026-47256OpenTelemetry, also known as OTel, is a vendor-neutral open …5.3
• CVE-2026-4726Denial-of-service in the XML component. This vulnerability w…7.5
• CVE-2026-47260Koel is a free, open-source music streaming solution. Prior …7.7