CVE-2026-75513

CriticalCVSS 9.1

Published: 16/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Summary

Marten from version 7.0.0 until 9.13.0 has a vulnerability involving interpolation of runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization in several LINQ and tenant-management paths. The primary confirmed vector is a dictionary indexer key used by Where filters. This could enable filter or multi-tenant authorization bypass and blind data exfiltration, and in some configurations data modification.

Risk Assessment

Risk of data integrity and authorization breaches, including bypassing tenant isolation and unauthorized data access. An attacker could also modify data if the server allows semicolon-batched statements.

Recommendation

Update Marten to version 9.13.0 that fixes this vulnerability. Review code for dictionary usage in filters and consider using parameterized queries.

Other vulnerabilities in Marten

CVE-2026-45288Critical
A SQL injection vulnerability was found in the Marten library for .NET in its full-text search APIs. The user-supplied regConfig parameter was directly interpolated into the generated SQL without parameterization or validation.

Original NVD description (English source)

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization. The primary confirmed vector is a dictionary indexer key used by Where filters in src/Marten/Linq/Members/Dictionaries/DictionaryItemMember.cs. Additional affected sinks include SelectParser.cs, DatabaseScopedTenantPartitions.cs, and DeleteAllForTenant.cs reached through IEventStore.DeleteProjectionProgressAsync, while DictionaryContainsKeyFilter.cs (Newtonsoft serializer only; System.Text.Json is not affected) handles ContainsKey calls. Events/Daemon/Internals/EventLoader.cs contains a related per-tenant partition-pruning literal that the advisory identifies as a defense-in-depth sink. A crafted single quote can escape the generated literal, enabling filter or multi-tenant authorization bypass and blind data exfiltration, and deployments that permit semicolon-batched Npgsql statements may also allow data modification. This issue is fixed in version 9.13.0.