Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/20 4:14 a.m.4 views

CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS6.3AI score0.00878EPSS
SaveExploits1References5
Rows per page
Query Builder