5 matches found
CVE-2026-82527
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoint. Attackers can exploit the direct interpolation of filter keys into the SQ...
CVE-2026-82527
R2R through 3.6.6 contains an SQL injection vulnerability in the retrieval search endpoint . Unauthenticated attackers can manipulate the filter key parameter , which is directly interpolated into the SQL WHERE clause without parameterization or escaping, enabling time-based and boolean-based dat...
CVE-2026-82527 R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoint. Attackers can exploit the direct interpolation of filter keys into the SQ...
EUVD-2026-70701
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoint. Attackers can exploit the direct interpolation of filter keys into the SQ...