teradata-mcp-server

The server has critical SQL Injection vulnerabilities. Many tools construct SQL queries using f-strings with user-controlled input (e.g., `table_name`, `database_name`, `column_name`, `user_name`, `obj_name`) directly embedded into the SQL string without proper escaping or parameter binding. For example, `handle_base_tableDDL` executes `show table {table_name}` and `handle_dba_tableSqlList` uses `LIKE '%{table_name}%'`, which can be exploited to execute arbitrary SQL commands. Additionally, default credentials ('admin'/'admin') are used for DSA API access if environment variables are not set, posing a risk in non-development environments. The server listens on `0.0.0.0` by default in Docker, making it externally accessible. While `eval` is used in `resolve_type_hint`, it is within a restricted namespace and context, reducing its immediate danger compared to the SQL injection issues.