CVE-2026-45325: Unquoted Dynamic Table Drop Or Show
Executing a DROP TABLE or SHOW CREATE TABLE query with a dynamic, unquoted template variable directly following the SQL keyword. This lacks specifying a database context or properly quoting the identifier, which can cause the operation to execute against an unintended default database (e.g., in a multi-tenant environment) or lead to unintentional injections.
JSgreprules fetch cve-2026-45325-unquoted-dynamic-table-drop-or-show --engine opengrepDescription
Executing a DROP TABLE or SHOW CREATE TABLE query with a dynamic, unquoted template variable directly following the SQL keyword. This lacks specifying a database context or properly quoting the identifier, which can cause the operation to execute against an unintended default database (e.g., in a multi-tenant environment) or lead to unintentional injections.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.