CVE-2026-62251

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-62251
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62251.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-62251
Aliases
Published
2026-10-07T16:09:41Z
Modified
2026-10-08T02:51:36Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query
Details

Homer is open source telecom observability software. Prior to version 11.0.283, the V4StatisticsQuery handler passes the user-supplied rawquery field directly to DuckDB without calling the sqlvalidator.ValidateRawSQL function used throughout the rest of the codebase. Any authenticated user can execute arbitrary SQL statements against all data accessible through the FlightSQL service. Version 11.0.283 patches the issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62251.json"
}
References

Affected packages

Git / github.com/sipcapture/homer

Affected ranges

Type
GIT
Repo
https://github.com/sipcapture/homer
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5e90809657c9df321db191a69c6050f873f5646b
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "11.0.283"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

11.*
11.0.199
11.0.202
11.0.203
11.0.204
11.0.205
11.0.207
11.0.208
11.0.209
11.0.210
11.0.213
11.0.214
11.0.215
11.0.216
11.0.217
11.0.219
11.0.220
11.0.222
11.0.224
11.0.225
11.0.226
11.0.227
11.0.228
11.0.229
11.0.230
11.0.231
11.0.232
11.0.234
11.0.235
11.0.236
11.0.238
11.0.239
11.0.241
11.0.242
11.0.244
11.0.245
11.0.246
11.0.249
11.0.250
11.0.251
11.0.256
11.0.258
11.0.269
11.0.270
11.0.272
11.0.273
11.0.274
11.0.275
11.0.277
11.0.278
11.0.280
11.0.281

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62251.json"