dolt-mcp

The server has critical SQL injection vulnerabilities. Several tool implementations construct SQL queries using `fmt.Sprintf` with user-provided arguments (e.g., `working_database`, `working_branch`, `table`, `start_date`, `end_date`) without proper SQL escaping or parameterization. This allows an authenticated attacker to inject arbitrary SQL commands by crafting malicious input for these arguments. For example, in `db_helpers.go`, `DoltUseWorkingDatabaseSQLQueryFormatString` and `DoltCheckoutWorkingBranchSQLQueryFormatString` use unescaped user input for `database` and `branch` names. Similarly, `list_dolt_diff_changes_in_date_range.go` and `list_dolt_diff_changes_by_table_name.go` also inject unescaped user input directly into SQL queries. While `singleQuoteEscape` exists, it is not consistently applied to all user-controlled inputs used in SQL queries. HTTP mode with JWT authentication adds a layer of access control, but does not mitigate these internal injection flaws once an attacker is authenticated.