CVE-2026-33980 Details
Description
Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL (Kusto Query Language) injection vulnerabilities in three MCP tool handlers: `get_table_schema`, `sample_table_data`, and `get_table_details`. The `table_name` parameter is interpolated directly into KQL queries via f-strings without any validation or sanitization, allowing an attacker (or a prompt-injected AI agent) to execute arbitrary KQL queries against the Azure Data Explorer cluster. Commit 0abe0ee55279e111281076393e5e966335fffd30 patches the issue.
A KQL injection vulnerability has been identified in Azure Data Explorer MCP Server versions through 0.1.1. This vulnerability exists in three MCP tool handlers: 'get_table_schema', 'sample_table_data', and 'get_table_details'. The issue arises because the 'table_name' parameter is directly inserted into KQL queries using f-strings, without any validation or sanitization. This flaw allows an attacker or a prompt-injected AI agent to execute arbitrary KQL queries against the Azure Data Explorer cluster.
Users can update to version 0.1.2 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp | CISA-ADP | ExploitVendor Advisory |
| https://github.com/pab1it0/adx-mcp-server/commit/0abe0ee55279e111281076393e5e966335fffd30 | [email protected] | Patch |
| https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-943 | Improper Neutralization of Special Elements in Data Query Logic | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| pab1it0 azure data explorer mcp server | <= 0.1.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 22, 2026 | Initial Analysis | [email protected] |
| Mar 27, 2026 | New CVE Received | [email protected] |
| Mar 27, 2026 | CVE Modified | CISA-ADP |