PT-2026-28582 · Microsoft · Azure Data Explorer Mcp Server

Publicado 2026-03-27 · Atualizado 2026-04-14 · CVE-2026-33980

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Azure Data Explorer MCP Server versions prior to commit 0abe0ee55279e111281076393e5e966335fffd30 Azure Data Explorer MCP Server versions up to and including 0.1.1

Description Azure Data Explorer MCP Server, a Model Context Protocol (MCP) server, contains Kusto Query Language (KQL) injection vulnerabilities in three tool handlers: get table schema, sample table data, and get table details. The table name parameter is directly interpolated into KQL queries without validation or sanitization. This allows an attacker, or a prompt-injected AI agent, to execute arbitrary KQL queries against the Azure Data Explorer cluster. The vulnerable code constructs KQL queries by embedding the table name parameter directly into query strings using f-strings. An attacker can inject malicious KQL code to read arbitrary tables, execute management commands, or perform other unauthorized actions. The injection bypasses the trust boundary established for "safe" metadata-inspection tools. The vulnerable API endpoints are:

''/get table schema'' ''/sample table data'' ''/get table details''

The vulnerable parameter is table name.

Recommendations Update Azure Data Explorer MCP Server to commit 0abe0ee55279e111281076393e5e966335fffd30 or a later version.

Exploit

Correção

Enumeração de Fraquezas

CWE-943

Identificadores relacionados

CVE-2026-33980

GHSA-VPHC-468G-8RFP

Produtos afetados

Azure Data Explorer Mcp Server

Referências · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33980.json · Exploit
• 🔥 https://github.com/pab1it0/adx-mcp-server/security/advisories/GHSA-vphc-468g-8rfp · Exploit
• https://github.com/pab1it0/adx-mcp-server · Nota
• https://github.com/pab1it0/adx-mcp-server/commit/0abe0ee55279e111281076393e5e966335fffd30 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-33980 · Nota de Segurança
• https://twitter.com/0xbrainKID/status/2038461167971024996 · Publicação no Twitter
• https://twitter.com/abcas_mcp_guard/status/2043865589836591287 · Publicação no Twitter
• https://twitter.com/abcas_mcp_guard/status/2043957944551944461 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2037659292183228601 · Publicação no Twitter
• https://twitter.com/0xbrainKID/status/2038419008051908926 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-33980 · Aviso do Fabricante
• https://twitter.com/ai_security_10x/status/2044149279208718392 · Publicação no Twitter
• https://twitter.com/ai_security_10x/status/2043825518211211615 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-vphc-468g-8rfp · Aviso do Fabricante