Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-57230— OpenReplay: Authenticated ClickHouse SQL injection via session search

Quick assessment

Affected
openreplay openreplay
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenReplay是OpenReplay公司开源的一款开发人员友好的、自托管的会话重播软件。 OpenReplay 1.27.0之前版本存在SQL注入漏洞，该漏洞源于会话搜索和分析API在构建ClickHouse查询时未对用户输入进行转义，可能导致经过身份验证的用户通过盲注布尔和时间型数据泄露读取任意ClickHouse表。

CVSS 5.4 · Medium EPSS 0.34% · P26

Affected Version Matrix 1

VendorProduct Version RangeStatus
openreplay openreplay < 1.27.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57230

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
OpenReplay: Authenticated ClickHouse SQL injection via session search
Source: CVE Program / CVE List V5
Vulnerability Description
OpenReplay is a self-hosted session replay suite. Prior to 1.27.0, the session search and analytics API in enterprise editions with multi-tenancy enabled built ClickHouse queries by inserting user input into the query string, including two positions that took input without escaping, allowing an authenticated member to read any ClickHouse table through blind boolean and time-based exfiltration and to break the project's session search for all viewers until the stored key is removed. This issue is fixed in version 1.27.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
OpenReplay SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenReplay是OpenReplay公司开源的一款开发人员友好的、自托管的会话重播软件。 OpenReplay 1.27.0之前版本存在SQL注入漏洞，该漏洞源于会话搜索和分析API在构建ClickHouse查询时未对用户输入进行转义，可能导致经过身份验证的用户通过盲注布尔和时间型数据泄露读取任意ClickHouse表。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
openreplay openreplay < 1.27.0 -

II. Public POCs for CVE-2026-57230

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57230

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-57230 (2)

Vendor Advisories for CVE-2026-57230 (1)

Vendor Pages for CVE-2026-57230 (1)

Same Patch Batch · openreplay · 2026-07-10 · 4 CVEs total

CVE-2026-55879 9.3 CRITICAL OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover
CVE-2026-55880 7.1 HIGH OpenReplay: Cross-user IDOR in notes and dashboard widgets
CVE-2026-55881 OpenReplay: Cross-tenant session replay disclosure via missing session ownership check in

IV. Related Vulnerabilities

Same product: openreplay
Same vendor: openreplay
Same weakness: CWE-89

V. Comments for CVE-2026-57230

No comments yet

Leave a comment