Anthropic SQLite MCP Server SQL Injection
Date: 2025-06
Affected: Anthropic SQLite MCP Server SQL Injection
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Classic SQL injection in Anthropic's reference SQLite MCP server (direct concatenation of unsanitized input). Despite being archived, forked 5,000+ times. Unpatched code exists in thousands of downstream agents. Anthropic declared "out of scope." SQL injection enables stored-prompt injection for manipulating AI agents.


Mitigations:

Architectural layers (MAESTRO):