CVE-2026-47252 (GCVE-0-2026-47252)
Vulnerability from cvelistv5
Published
2026-09-17 18:17
Modified
2026-09-17 19:12
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Summary
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled URL into AppleScript or JXA source passed to osascript. In plugins/chrome/tabs.go, tabsTable.Insert() passes the URL through fmt.Sprintf(newTabScript, url), and tabsTable.Update() uses fmt.Sprintf(setURLScript, pk, url). A URL containing quote and newline characters can break out of the intended string or property record and append script statements, resulting in arbitrary command execution with the privileges of the anyquery process on the macOS host. This issue is fixed in version 0.4.5.
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| julien040 | anyquery |
Version: < 0.4.5 |
|||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47252",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T19:11:46.878638Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T19:12:07.053Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "anyquery",
"vendor": "julien040",
"versions": [
{
"status": "affected",
"version": "\u003c 0.4.5"
}
]
},
{
"product": "github.com/julien040/anyquery/plugins/brave",
"vendor": "anyquery",
"versions": [
{
"status": "affected",
"version": "\u003c 0.2.0"
}
]
},
{
"product": "github.com/julien040/anyquery/plugins/chrome",
"vendor": "anyquery",
"versions": [
{
"status": "affected",
"version": "\u003c 0.2.0"
}
]
},
{
"product": "github.com/julien040/anyquery/plugins/edge",
"vendor": "anyquery",
"versions": [
{
"status": "affected",
"version": "\u003c 0.2.0"
}
]
},
{
"product": "github.com/julien040/anyquery/plugins/reminders",
"vendor": "anyquery",
"versions": [
{
"status": "affected",
"version": "\u003c 0.2.0"
}
]
},
{
"product": "github.com/julien040/anyquery/plugins/safari",
"vendor": "anyquery",
"versions": [
{
"status": "affected",
"version": "\u003c 0.2.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled URL into AppleScript or JXA source passed to osascript. In plugins/chrome/tabs.go, tabsTable.Insert() passes the URL through fmt.Sprintf(newTabScript, url), and tabsTable.Update() uses fmt.Sprintf(setURLScript, pk, url). A URL containing quote and newline characters can break out of the intended string or property record and append script statements, resulting in arbitrary command execution with the privileges of the anyquery process on the macOS host. This issue is fixed in version 0.4.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T18:17:43.939Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc"
},
{
"name": "https://github.com/julien040/anyquery/commit/33769e03bd4b0f76d7a20a4188cce7153f6db1c9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/julien040/anyquery/commit/33769e03bd4b0f76d7a20a4188cce7153f6db1c9"
},
{
"name": "https://github.com/julien040/anyquery/releases/tag/0.4.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/julien040/anyquery/releases/tag/0.4.5"
}
],
"source": {
"advisory": "GHSA-hrj8-hjv8-mgwc",
"discovery": "UNKNOWN"
},
"title": "Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-47252",
"datePublished": "2026-09-17T18:17:43.939Z",
"dateReserved": "2026-05-18T22:54:18.273Z",
"dateUpdated": "2026-09-17T19:12:07.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-47252\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-17T19:11:46.878638Z\"}}}], \"references\": [{\"url\": \"https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-17T19:11:58.193Z\"}}], \"cna\": {\"title\": \"Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)\", \"source\": {\"advisory\": \"GHSA-hrj8-hjv8-mgwc\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"julien040\", \"product\": \"anyquery\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.4.5\"}]}, {\"vendor\": \"anyquery\", \"product\": \"github.com/julien040/anyquery/plugins/brave\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.2.0\"}]}, {\"vendor\": \"anyquery\", \"product\": \"github.com/julien040/anyquery/plugins/chrome\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.2.0\"}]}, {\"vendor\": \"anyquery\", \"product\": \"github.com/julien040/anyquery/plugins/edge\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.2.0\"}]}, {\"vendor\": \"anyquery\", \"product\": \"github.com/julien040/anyquery/plugins/reminders\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.2.0\"}]}, {\"vendor\": \"anyquery\", \"product\": \"github.com/julien040/anyquery/plugins/safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.2.0\"}]}], \"references\": [{\"url\": \"https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc\", \"name\": \"https://github.com/julien040/anyquery/security/advisories/GHSA-hrj8-hjv8-mgwc\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/julien040/anyquery/commit/33769e03bd4b0f76d7a20a4188cce7153f6db1c9\", \"name\": \"https://github.com/julien040/anyquery/commit/33769e03bd4b0f76d7a20a4188cce7153f6db1c9\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/julien040/anyquery/releases/tag/0.4.5\", \"name\": \"https://github.com/julien040/anyquery/releases/tag/0.4.5\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled URL into AppleScript or JXA source passed to osascript. In plugins/chrome/tabs.go, tabsTable.Insert() passes the URL through fmt.Sprintf(newTabScript, url), and tabsTable.Update() uses fmt.Sprintf(setURLScript, pk, url). A URL containing quote and newline characters can break out of the intended string or property record and append script statements, resulting in arbitrary command execution with the privileges of the anyquery process on the macOS host. This issue is fixed in version 0.4.5.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-09-17T18:17:43.939Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-47252\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-17T19:12:07.053Z\", \"dateReserved\": \"2026-05-18T22:54:18.273Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-09-17T18:17:43.939Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…