Attacks/MCP Exploitation/MCP-008

CRITICALCWE-89

MCP-008 MCP SQL Injection

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts SQL injection via MCP query tool

Remediation

Use parameterized queries. Block SQL metacharacters in tool parameters.

Severity

CRITICAL

OASB Control

CWE

CWE-89

PreviousMCP-007 MCP SSRF to Internal Service NextMCP-009 MCP Write to Sensitive Path