CVE-2026-116053 | dbcli mycli up to 2.29.4/2.30.1 Whitelist source.py source_special_command_is_safe os command injection

October 24, 2026 Yanac

A vulnerability was found in dbcli mycli up to 2.29.4/2.30.1 and classified as problematic. The impacted element is the function source_special_command_is_safe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection.

This vulnerability is handled as CVE-2026-116053. It is possible to launch the attack on the local host. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More