Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SQLBot — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in SQLBot, with AI-generated Chinese analysis, references, and POCs.

This page aggregates verified security vulnerabilities associated with SQLBot, a data analysis platform, specifically tracking weaknesses categorized under SQL injection and logic flaws. It compiles a centralized collection of security advisories, bug reports, and patch notes released by the vendor, covering the period from the product's initial public release through the most recent quarterly update cycle. Readers can use this hub to monitor the vendor's disclosure trends, analyze the prevalence of specific weakness classes, and review the complete historical record of identified defects. The data is organized chronologically to support longitudinal analysis of how SQLBot's security posture has evolved. This summary serves as a neutral reference point for security teams evaluating risk exposure and planning remediation efforts based on publicly available intelligence.

Vendor: dataease

CVE ID Title CVSS Severity Published
CVE-2026-93660 SQLBot through 1.10.1 Improper Access Control via Dashboard Update CWE-639 6.5 Medium 2026-09-18
CVE-2026-53557 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution CWE-89 7.7 High 2026-09-17
CVE-2026-53555 Stored XSS via SVG Upload CWE-79 5.1 Medium 2026-09-17
CVE-2026-53556 SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read CWE-89 6.0 Medium 2026-09-17
CVE-2026-53554 SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing CWE-22 7.3 High 2026-09-17
CVE-2026-72743 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html CWE-79 5.4 Medium 2026-08-10
CVE-2026-42463 SQLBot: Unauthorized Access Vulnerability CWE-639 - - 2026-05-13
CVE-2026-33324 SQLBot prompt injection allows arbitrary SQL execution and remote code execution CWE-89 8.8 - 2026-05-05
CVE-2026-5417 Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery CWE-918 4.7 Medium 2026-04-02
CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint CWE-89 8.8 - 2026-03-20
CVE-2026-32949 SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL CWE-918 7.5 - 2026-03-20
CVE-2026-32622 SQLBot: Remote Code Execution via Terminology Poisoning CWE-862 8.8 - 2026-03-19
CVE-2025-15598 Dataease SQLBot JWT Token auth.py validateEmbedded signature verification CWE-347 3.7 Low 2026-03-03
CVE-2025-15597 Dataease SQLBot API Endpoint assistant.py access control CWE-284 6.3 Medium 2026-03-02
CVE-2025-69285 SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability CWE-306 9.8AI Critical AI 2026-01-21

All 15 known CVE vulnerabilities affecting SQLBot with full Chinese analysis, references, and POCs where available.