# Database client vulnerability

Database client vulnerability
High · Patch available
Affected: Example DB desktop 4.2
Fixed in: 4.2.1

The desktop client accepts a malicious connection string that can run local commands.

What to do:
- Update the desktop client to 4.2.1.
- Do not open connection strings from untrusted mail.

Sources:
- Vendor note https://example.com/db-client

Canonical page: https://www.incidentping.com/incidents/database-client-vulnerability