Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-53555— Stored XSS via SVG Upload

Quick assessment

Affected
dataease SQLBot
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SQLBot 是一个基于大语言模型和 RAG 的智能 Text-to-SQL 系统。在 1.9.0 版本之前，经过身份验证的上传者可以通过 端点提交 image/svg+xml 格式的助手 UI 标志。SQLBot 在存储该 SVG 文件时，未对其中嵌入的活跃内容（如内嵌 JavaScript）进行清理或校验。随后，SQLBot 通过 从同一应用源内联提供该文件。当其他用户加载该生成的资源时，SVG 中嵌入的 JavaScript 会在 SQLBot Web 应用的上下文中执行，从而导致存储型跨站脚本攻击（Stor

CVSS 5.1 · Medium EPSS 0.02% · P7

Possible ATT&CK Techniques 1 AI

T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-53555

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Stored XSS via SVG Upload
Source: CVE Program / CVE List V5
Vulnerability Description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
dataease SQLBot < 1.9.0 -

II. Public POCs for CVE-2026-53555

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-53555

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-53555 (2)

Vendor Advisories for CVE-2026-53555 (1)

Vendor Pages for CVE-2026-53555 (1)

Same Patch Batch · dataease · 2026-09-17 · 4 CVEs total

CVE-2026-53557 7.7 HIGH SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Executio
CVE-2026-53554 7.3 HIGH SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Impo
CVE-2026-53556 6.0 MEDIUM SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read

IV. Related Vulnerabilities

Same product: SQLBot
Same vendor: dataease
Same weakness: CWE-79

V. Comments for CVE-2026-53555

No comments yet

Leave a comment