CVE-2026-121453— SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

Quick assessment

Affected

dataease SQLBot

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SQLBot 1.10.3 及更早版本在接口中存在路径遍历漏洞。已认证的 Workspace 管理员可通过未经验证的参数读取文件。攻击者可提供绝对路径或序列，将 CSV 或电子表格文件（包括其他工作空间的上传文件及服务器文件）导入到可查询的表中。

CVSS 2.7 · Low Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1083 · File and Directory Discovery T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

Source: CVE Program / CVE List V5

Vulnerability Description

SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace administrators to read files via an unsanitized filePath parameter. Attackers can supply absolute paths or ../ sequences to import CSV or spreadsheet files, including other workspaces' uploads and server files, into queryable excel_* tables.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

对路径名的限制不恰当(路径遍历)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
dataease	SQLBot	0 ~ 1.10.3	-

II. Public POCs for CVE-2026-121453

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-121453

请登录查看更多情报信息。

Other References for CVE-2026-121453 (1)

🔗 GitHub - dataease/SQLBot: 🔥 基于大模型和 RAG 的智能问数系统，对话式数据分析神器。Text-to-SQL Generation via LLMs using RAG. · GitHub product

Other References for CVE-2026-121453 (5)

https://github.com/dataease/SQLBot/blob/v1.10.3/backend/apps/datasource/utils/excel.py#L48-L57 technical-description
https://github.com/dataease/SQLBot/blob/v1.10.3/backend/apps/datasource/api/datasource.py#L580-L585 technical-description
https://github.com/dataease/SQLBot/commit/3d15c67b4de6ed9420daa9a34e4dc371ebbf4765 patch
https://github.com/dataease/SQLBot/issues/1434 issue-tracking
https://www.vulncheck.com/advisories/sqlbot-through-1.10.3-path-traversal-via-datasource-importtodb-endpoint third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-121453

IV. Related Vulnerabilities

Same product: SQLBot

Same vendor: dataease

Same weakness: CWE-22