Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/03/20 4:14 a.m.22 views

CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS0.00878EPSS
SaveExploits1References3
Rows per page
Query Builder