CVE-2026-104141

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-104141
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104141.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-104141
Aliases
  • GHSA-8hgp-vw27-hxph
Published
2026-10-14T18:41:06Z
Modified
2026-10-28T11:03:39Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
DataEase: SQL Injection in datasource metadata identifiers
Details

DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these identifiers into metadata queries that are executed through a plain JDBC Statement, allowing the generated SQL to be altered and run against the configured backend with application-held datasource credentials. The issue can compromise the confidentiality, integrity, and availability of the connected database without requiring a victim action.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104141.json"
}
References

Affected packages

Git / github.com/dataease/dataease

Affected ranges

Type
GIT
Repo
https://github.com/dataease/dataease
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
04129b006b2a51447fb15f5c32138f39a4fd4fec
Fixed
181bb5cb95a1174f04689b3b6042d5e0c71b782d
Fixed
c13145b5d452beee2735429b9f65226ff5d7cc8c
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2.10.26"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "181bb5cb95a1174f04689b3b6042d5e0c71b782d"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v2.10.27",
            "range": [
                {
                    "fixed": "c13145b5d452beee2735429b9f65226ff5d7cc8c"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v2.*
v2.10.0
v2.10.1
v2.10.10
v2.10.11
v2.10.12
v2.10.13
v2.10.14
v2.10.15
v2.10.16
v2.10.17
v2.10.18
v2.10.19
v2.10.2
v2.10.20
v2.10.21
v2.10.22
v2.10.23
v2.10.24
v2.10.25
v2.10.3
v2.10.4
v2.10.5
v2.10.6
v2.10.7
v2.10.8
v2.10.9
v2.2.0
v2.3.0
v2.6.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104141.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "138830983378359290165986802393460198063",
            "length": 435
        },
        "id": "CVE-2026-104141-0a1933df",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/c13145b5d452beee2735429b9f65226ff5d7cc8c",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareVisitorPermissionManage.java",
            "function": "creatorPermissions"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "156224859862454039249878240099771373230",
            "length": 1030
        },
        "id": "CVE-2026-104141-2530b308",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "getTableTypeMap"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "308445855760156970187290624990163045884",
            "length": 656
        },
        "id": "CVE-2026-104141-36aec64b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "getSchemaSql"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "131255301751461055641338612697589075053",
            "length": 3227
        },
        "id": "CVE-2026-104141-3bd1951e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "fetchTableField"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "287665191561475116468443912699423934746",
            "length": 10760
        },
        "id": "CVE-2026-104141-6979b71b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "getTableFiledSql"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "210944000691143859523152783268912009973",
                "23536042484071803423586419117416855053",
                "112985584337304551266353536315216448495",
                "112652919625594936432343756050243755523"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-104141-6a84749c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/c13145b5d452beee2735429b9f65226ff5d7cc8c",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/server/XpackShareServer.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "250823191491488375064602900356360671082",
                "45798901125952288532725443609150790449",
                "116274692457454503735784902038600465284",
                "314382993788170320363538561032902853219",
                "300206021258696666411353978492119969406",
                "32503479358165172479009787569341999153",
                "76582003541135578794529478861945690257",
                "4021978697175000022879260222661956691",
                "151872682215631214622171484310282447040",
                "249777592358200114190937291048248478374",
                "288054137501454606033814047728359784850",
                "322166127807029835461327790538709779139",
                "253169806805839790486601923016029611518",
                "256898242777430596108259815399222919795"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-104141-769e1017",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/c13145b5d452beee2735429b9f65226ff5d7cc8c",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareVisitorPermissionManage.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "14294175934636417129475116515407264197",
                "129118610082244722361370953172865241810",
                "10496985394105495196401895125406616720",
                "268437153547134241492374164021845284094"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-104141-7a0f97b5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/engine/utils/Utils.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "168277516801445906972875936625168324169",
            "length": 846
        },
        "id": "CVE-2026-104141-7b21af43",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "getStatement"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "145332292429390200803527795126755207503",
                "259787406590403771095613047413280328190",
                "109698987559331476791248910392431677251",
                "26856766913220611748831666648256503617",
                "144486740912443677876905325269346391277",
                "307879516291648490801174771170633848526",
                "91488256591028519048703375069694530725",
                "223347412588681481506867153014340939696",
                "184556726304295244191198568993595537652",
                "84593415416921583905230228017134016238",
                "88353842647259198561942375668206799465",
                "17311333700073578069615634993411474243",
                "280352617148595699980059032840393916501",
                "244272520875796506634283800383980808839",
                "340150630528347436745073945261048736258",
                "90581331977936040420232524892298001671",
                "220365712468007599269860086165197541792",
                "35160146897376314650677963782726564913",
                "50594709955814627273316256862417993213",
                "140847601126245166798075299382411999729",
                "335372567350973123165248143853896749098",
                "242898363399969481064661244052052637291",
                "74991030833782090980744252273035244273",
                "2550246744767167247747030431601910374",
                "75489938202337504461557968802453050284",
                "49377987939387339776309987742030507878",
                "121183432113942284357244199869185836603",
                "232225128610678677559015846514162888822",
                "252070561487105216102347685586439832012",
                "163267155502595680735888336531575332583",
                "29837412807723141650336280970161547949",
                "45642136156215171171321489671645706380",
                "166826378569081762434138470954600318282",
                "323171468611863484753594989287508291813",
                "103519168017291910551828961934392146810",
                "32005787830633393050395399008134646114",
                "82028480658728467761758070441394066645",
                "28751217266387712941369142653433174819",
                "108587633537507210242609878158511307392",
                "14503728891991007853442619485606953056",
                "81406778237359604640248743659322516956",
                "185331562924646124379053506933531354755",
                "61368293604486521045690681910928778365",
                "291310003797912286403683723161687929805",
                "35441162603411787128040253751385175740",
                "44413164347258592168586226533821459016",
                "320308700822378581305741245882011051890",
                "330720490923625908353177469160929158736",
                "101872445869898496714212906074851064895",
                "324715319666936355610429829981831463938",
                "286192017288879957901522084167476474890",
                "326860544588059322750354395616329555185",
                "143128379095409959681465761265268454532",
                "166895631373932824121781572656054977187",
                "265116241564346002392198971697718859228",
                "98020251060399555222312206442182836929",
                "58666696026778949783382779083809564005",
                "169633817693057618161571169943676499604",
                "22505937192454193681791655879585159171",
                "258718359114820355457576304168436838370",
                "286062147359035157539110856168699922595",
                "157289836972471544060147582514734029384",
                "100955784323277527468577434009808878613",
                "173788893508610110624808060991051474056",
                "150660921298362001872001081732153703711",
                "196205490762718629063853004176609672899",
                "65465803585952542733192949227930268582",
                "141357462846852598109076561276002078872",
                "296410835517640648648140152206884761796",
                "328654777701110066020283210799693501312",
                "316200606160020432911080217584297864684",
                "157149843283068349823531884066700551745",
                "233407029059460581210496022046243691515",
                "266042007509895488808164812909223227088",
                "160780013551446097810785081684620509580",
                "11872597523402716183066879104324138607",
                "255292225698984175613919989779149643331",
                "309223644212118514139770279337691731540",
                "336595161876352443379055203615275100253",
                "92930227322348312881091659326004236210",
                "194602232624559338256587857218435886238",
                "59233473314043942844675117931414765804",
                "233171800540403197721951044379602750585",
                "227287555577706541574976869318092689419",
                "288966958140760808903026876688224464060",
                "76796310181803817684729693945258614192",
                "143268838496119404890557591307657434292",
                "34958220101364537252683163423342468148",
                "49932388385693435542798230447398319529",
                "273044645211350846033584871890401335473",
                "265297195738410554135969476014916434799",
                "323895260930632762149848193889216193999",
                "152748224788386928094266929751119129823",
                "98164409313555038050092000525127853556",
                "331634222163980816023948874342479133544",
                "110076580276204170974494354737544307501",
                "102912652582245664206873202684269488798",
                "183793354777017437107622755634026497363",
                "289939730523530745820027446777779955408",
                "3979555610826684851824367628402537720"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-104141-82306f86",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "86248470288473978102425236281450470361",
            "length": 900
        },
        "id": "CVE-2026-104141-a5c9b1eb",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/datasource/provider/CalciteProvider.java",
            "function": "getSchema"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "7970962375705162495787958084359103974",
            "length": 801
        },
        "id": "CVE-2026-104141-d9ae4a6e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/c13145b5d452beee2735429b9f65226ff5d7cc8c",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/server/XpackShareServer.java",
            "function": "saveVisitorPermissions"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "131328801652251702987886903927628773505",
            "length": 820
        },
        "id": "CVE-2026-104141-f727400d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/dataease/dataease/commit/c13145b5d452beee2735429b9f65226ff5d7cc8c",
        "target": {
            "file": "core/core-backend/src/main/java/io/dataease/share/manage/ShareVisitorPermissionManage.java",
            "function": "currentPermissions"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:03:39Z"