CVE-2026-5417

A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function getesdatabyhttp of the file backend/apps/db/esengine.py of the component Elasticsearch Handler. This manipulation of the argument address causes server-side request forgery. The attack may be initiated...

CVE-2026-5417

Dataease SQLbot up to 1.6.0 contains an SSRF issue in the Elasticsearch Handler. The vulnerability is in get_es_data_by_http (backend/apps/db/es_engine.py) where argument address is manipulated, potentially allowing a remote attack. Public exploit disclosures exist. Upgrading to Dataease SQLbot 1...