{
 "id": "AIR-2026-1003",
 "slug": "cve-2026-33980-azure-data-explorer-mcp-server-kql-injection",
 "title": "CVE-2026-33980: Azure Data Explorer MCP Server KQL injection vulnerability",
 "summary": "Azure Data Explorer MCP Server contains KQL injection vulnerabilities in multiple MCP tool handlers due to unvalidated parameter interpolation. The flaw permits arbitrary KQL query execution by attackers or injected AI agents.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "agent_hijack"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Azure Data Explorer MCP Server"
 ],
 "incident_date": "2026-03-27",
 "incident_date_precision": "day",
 "first_reported": "2026-03-27",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33980",
   "publisher": "NVD",
   "title": "CVE-2026-33980: Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and…",
   "published_at": "2026-03-27"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-33980",
  "injection",
  "mcp"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}