logo

Data leakage risks with DBHub MCP servers | UpGuard

ID: dd6428ac-8081-5895-b8c7-3c3c6dd474f8

STIX ID: report--dd6428ac-8081-5895-b8c7-3c3c6dd474f8

Feed Name: UpGuard Blog

Threat Score
60/100

Date Published: 2026-07-13

Date Updated: 2026-07-20

...
...

DBHub, an MCP server that provides AI-driven access to databases, has been found publicly exposed: UpGuard discovered 31 internet-reachable instances (25 allowing SQL execution), sampled data on 22 systems including PII and medical records, and observed plaintext API credentials on two servers — illustrating how MCP misconfigurations create a new, high-value data exposure vector.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.