Secuno
ENNL
Book demo

CVE-2026-47252

9.0 CRITICAL
  1. Published17 Sept 2026

Description

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled URL into AppleScript or JXA source passed to osascript. In plugins/chrome/tabs.go, tabsTable.Insert() passes the URL through fmt.Sprintf(newTabScript, url), and tabsTable.Update() uses fmt.Sprintf(setURLScript, pk, url). A URL containing quote and newline characters can break out of the intended string or property record and append script statements, resulting in arbitrary command execution with the privileges of the anyquery process on the macOS host. This issue is fixed in version 0.4.5.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionRequired
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-451409.8
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS…
CVE-2026-158158.8
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when…
CVE-2026-9293710.0
vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the…
CVE-2026-6210410.0
Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8…
CVE-2026-887959.0
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its…
CVE-2026-925938.8
Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794:…

Frequently asked

Is CVE-2026-47252 being actively exploited?

CVE-2026-47252 is not in the CISA KEV catalog.

How severe is CVE-2026-47252?

CVE-2026-47252 has a CVSS 3.1 base score of 9.0, rated critical.

How do I fix CVE-2026-47252?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-47252 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.