Skip to content
OpenAdvisories

Product · dataease

SQLbot

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-93660

    SQLBot through 1.10.1 Improper Access Control via Dashboard Update

    SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authenticated workspace members to modify other users' private dashboards. Attackers can supply arbitrary dashboard IDs to rename dashboards and…

    dataease SQLbot
  • Medium 5.1
    CVE-2026-53555

    Stored XSS via SVG Upload

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing…

    dataease SQLbot
  • Medium 6.0
    CVE-2026-53556

    SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasource/crud/datasource.py incorporates the client-controlled table_name value into generat…

    dataease SQLbot
  • Medium 5.4
    CVE-2026-72743

    SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html

    SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inje…

    dataease SQLbot
  • Medium 4.7
    CVE-2026-5417

    Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery

    A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of the file backend/apps/db/es_engine.py of the component Elasticsearch Handler. This manipulation of the argument address causes server-side re…

    dataease SQLbot
  • Medium 6.3
    CVE-2025-15597

    Dataease SQLBot API Endpoint assistant.py access control

    A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the a…

    dataease SQLbot