CVE-2026-33324

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-33324
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33324.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-33324
Aliases
  • GHSA-q2q6-gqqh-4xrx
Published
2026-05-05T19:09:36Z
Modified
2026-10-21T02:56:48Z
Severity
  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
Details

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided question parameter is directly concatenated into the LLM prompt without filtering or escaping, and the SQL extracted from the LLM response is executed against the database without validation or sanitization. An authenticated attacker can craft a malicious question to manipulate the LLM into generating and executing arbitrary SQL statements. When connected to a PostgreSQL data source, this can lead to remote code execution via COPY FROM PROGRAM. This issue has been fixed in version 1.7.1.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33324.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "1.7.1"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StringRangeExpression"
                }
            ]
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "1.7.1"
                        }
                    ],
                    "source":  "DESCRIPTION"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/dataease/sqlbot

Affected ranges

Type
GIT
Repo
https://github.com/dataease/sqlbot
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
22e66c490fc67f77b94d71dfdb048270e9b6641a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.7.0"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.1.0
v1.1.2
v1.1.3
v1.1.4
v1.2.0
v1.2.1
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.7.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33324.json"