Login Request a demo
SQ
Product
SQLbot
by dataease · last CVE Sep 18, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 7Medium 8Low 0
Severity
All severities15Critical0High7Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SQLbot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33324
8.8
1%
May 5
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
Affected: < 1.7.1
CVE-2026-32950
8.8
1%
Mar 20
SQLBot: RCE via SQL Injection in Excel Upload Endpoint
Affected: < 1.7.0
CVE-2026-32622
8.8
1%
Mar 19
SQLBot: Remote Code Execution via Terminology Poisoning
Affected: < 1.6.0
CVE-2026-42463
8.1
0%
May 13
SQLBot: Unauthorized Access Vulnerability
Affected: < 1.8.0
CVE-2026-53557
7.7
0%
Sep 17
SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
Affected: < 1.9.0
CVE-2026-32949
7.5
0%
Mar 20
SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
Affected: < 1.7.0
CVE-2026-53554
7.3
0%
Sep 17
SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing
Affected: < 1.9.0
CVE-2026-93660
6.5
0%
Sep 18
SQLBot through 1.10.1 Improper Access Control via Dashboard Update
Affected: through 1.10.1
CVE-2025-15597
6.3
1%
Mar 2
Dataease SQLBot API Endpoint assistant.py access control
Affected: 1.0; 1.1; 1.2; 1.3; 1.4.0
CVE-2025-69285
6.1
0%
Jan 21
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Affected: < 1.5.0
CVE-2026-53556
6.0
0%
Sep 17
SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read
Affected: < 1.9.0
CVE-2025-15598
5.9
0%
Mar 3
Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
Affected: 1.5.0; 1.5.1
CVE-2026-72743
5.4
0%
Aug 10
SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
Affected: through 1.10.0
CVE-2026-53555
5.1
0%
Sep 17
Stored XSS via SVG Upload
Affected: < 1.9.0
CVE-2026-5417
4.7
0%
Apr 2
Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +1 more
Showing 15