Dataease Sqlbot vulnerabilities

CVE-2026-33324 [HIGH] CWE-89 CVE-2026-33324: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7. SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided question parameter is directly concatenated into the LLM prompt without filtering or escaping, and the SQL extracted from the LLM response is executed against

CVE-2026-32622 [HIGH] CWE-20 CVE-2026-32622: SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 a SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 and below contain a Stored Prompt Injection vulnerability that chains three flaws: a missing permission check on the Excel upload API allowing any authenticated user to upload malicious terminology, unsanitized storage of terminology descriptions containi

CVE-2026-32950 [HIGH] CWE-78 CVE-2026-32950: SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior t SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution (RCE), allowing any authenticated user (even the lowest-privileged) to fully compromise the backend server. The root

CVE-2026-42463 [HIGH] CWE-639 CVE-2026-42463: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Authorization Bypass vulnerability in the /api/v1/datasource/exportDsSchema and /api/v1/datasource/uploadDsSchema endpoints. An attacker can access and modify database schemas

CVE-2026-53557 [HIGH] CWE-89 CVE-2026-53557: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBot stores that value without safe identifier handling. When the same datasource is later removed

CVE-2026-32949 [HIGH] CWE-73 CVE-2026-32949: SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior t SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. An attacker can exploit the /api/v1/datasource/check endpoint by configuring a forged MySQL dat

CVE-2025-15597 [MEDIUM] CWE-266 CVE-2025-15597: A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of t A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to v

CVE-2026-53556 [MEDIUM] CWE-89 CVE-2026-53556: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasource/crud/datasource.py incorporates the client-controlled table_name value into generated SQL without safe identifier handling. An authenticated user can configure a datasource for

CVE-2026-53554 [HIGH] CWE-22 CVE-2026-53554: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting where uploaded content is stored, writes the content before spreadsheet parsing and validation fin

CVE-2026-93660 [MEDIUM] CWE-639 CVE-2026-93660: SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpo SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authenticated workspace members to modify other users' private dashboards. Attackers can supply arbitrary dashboard IDs to rename dashboards and overwrite component data, canvas styles, and view information belonging to other workspace

CVE-2025-69285 [MEDIUM] CWE-306 CVE-2025-69285: SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior t SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel endpoint, allowing a remote unauthenticated attacker to upload arbitrary Excel/CSV files and inject data directly into the PostgreSQL database. The endpoint i

CVE-2025-15598 [MEDIUM] CWE-345 CVE-2025-15598: A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend/apps/system/middleware/auth.py of the component JWT Token Handler. Performing a manipulation results in improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered to have high

CVE-2026-5417 [MEDIUM] CWE-918 CVE-2026-5417: A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_e A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of the file backend/apps/db/es_engine.py of the component Elasticsearch Handler. This manipulation of the argument address causes server-side request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed a

CVE-2026-53555 [MEDIUM] CWE-79 CVE-2026-53555: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same appl

CVE-2026-72743 [MEDIUM] CWE-79 CVE-2026-72743: SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that executes for all users viewing the dashboard.