CVE-2026-82526

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82526
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82526.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82526
Published
2026-09-03T18:12:48Z
Modified
2026-10-08T02:52:05Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
Details

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82526.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "3.6.6"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/SciPhi-AI/R2R

Affected ranges

Type
GIT
Repo
https://github.com/SciPhi-AI/R2R
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
9c5a94d151f90876bd7eb860f300a8fd662dc481

Affected versions

3.*
3.3.27
V3.*
V3.1.0
v0.*
v0.0.01
v0.0.1
v0.1.1
v0.1.2
v0.1.21
v0.1.22
v0.1.23
v0.1.24
v0.1.26
v0.1.27
v0.1.28
v0.1.29
v0.1.30
v0.1.31
v0.1.32
v0.1.33
v0.1.34
v0.1.35
v0.2.00
v0.2.01
v0.2.02
v0.2.03
v0.2.04
v0.2.10
v0.2.11
v0.2.12
v0.2.15
v0.2.16
v0.2.17
v0.2.39
v0.2.47
v0.2.51
v0.2.58
v0.2.59
v0.2.60
v0.2.61
v0.2.73
v0.2.74
v0.2.76
v0.2.85
v0.3.0
v2.*
v2.0.18
v2.0.3
v2.0.38
v2.0.64
v2.0.83
v2.0.84
v3.*
v3.0.0
v3.2.0
v3.2.30
v3.3.0
v3.3.28
v3.3.29
v3.3.30
v3.4.0
v3.4.2
v3.4.3
v3.4.4
v3.4.5
v3.4.6
v3.5.0
v3.5.1
v3.5.10
v3.5.11
v3.5.12
v3.5.13
v3.5.15
v3.5.16
v3.5.17
v3.5.18
v3.5.19
v3.5.2
v3.5.3
v3.5.6
v3.5.7
v3.5.8
v3.5.9
v3.6.0
v3.6.1
v3.6.2
v3.6.3
v3.6.4
v3.6.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82526.json"