Skip to content
OpenAdvisories

Product · dataease

SQLbot

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.7
    CVE-2026-53557

    SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBo…

    dataease SQLbot
  • High 7.3
    CVE-2026-53554

    SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting wh…

    dataease SQLbot
  • High 8.6
    CVE-2026-42463

    SQLBot: Unauthorized Access Vulnerability

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Authorization Bypass vulnerability in the /api/v1/datasource/exportDsSchema and /…

    dataease SQLbot
  • High 8.6
    CVE-2026-32950

    SQLBot: RCE via SQL Injection in Excel Upload Endpoint

    SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution (RCE), allowing any au…

    dataease SQLbot
  • High 8.7
    CVE-2026-32949

    SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL

    SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. …

    dataease SQLbot
  • High 8.6
    CVE-2026-32622

    SQLBot: Remote Code Execution via Terminology Poisoning

    SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 and below contain a Stored Prompt Injection vulnerability that chains three flaws: a missing permission check on the Excel upload API allowing any authenticated…

    dataease SQLbot
  • High 7.7
    CVE-2025-69285

    SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability

    SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel endpoint, allowing a remote unauthenticated attacker to upload arb…

    dataease SQLbot