EUVD-2026-13541Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious MySQL datasource with local_infile=1
-
DeliverySubmit to /api/v1/datasource/check endpoint
-
ExploitSQLBot verifies connectivity to rogue MySQL server
-
ExecutionServer issues LOAD DATA LOCAL INFILE
-
ImpactArbitrary files retrieved from backend system
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V5 - File Handling File name/path control
|
| Exploitation Conditions | SQLBot versions prior to 1.7.0. Remote unauthenticated attacker exploits /api/v1/datasource/check endpoint by configuring forged MySQL datasource with extraJdbc="local_infile=1" parameter. Attacker operates rogue MySQL server to issue malicious LOAD DATA LOCAL INFILE commands. No victim interaction required. |
| Impact | The CVSS 4.0 score of 8.7 reflects high severity with network attack vector (AV:N), low complexity (AC:L), no privileges required (PR:N), and high confidentiality impact (VC:H). The attack is straightforward to execute once the /api/v1/datasource/check endpoint is accessible, requiring only the ability to submit a crafted data source configuration and control a rogue MySQL server. While no EPSS score or KEV listing indicates limited observed exploitation, the technical simplicity (automatable attack with no user interaction required) and availability of detailed GitHub security advisory with commit-level fix information means proof-of-concept development is trivial. Real-world risk is elevated for internet-exposed SQLBot instances, particularly those used in data analytics environments where sensitive configuration files and credentials may be accessible. The vulnerability enables reconnaissance and credential harvesting as a stepping stone to deeper compromise, making it a genuine priority despite absence of widespread exploitation evidence. |
| Exploit ScenarioDerived | An unauthenticated attacker accesses the publicly exposed /api/v1/datasource/check endpoint and submits a crafted MySQL data source configuration containing extraJdbc parameter set to local_infile=1, along with connection details pointing to their malicious MySQL server. When SQLBot attempts to verify the data source connectivity, the attacker's rogue MySQL server responds with LOAD DATA LOCAL INFILE commands during the handshake, forcing SQLBot to read sensitive files like /etc/passwd, application configuration files containing database credentials, or cloud instance metadata, and transmit the contents back to the attacker for credential harvesting and lateral movement. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 20, 2026
A Server-Side Request Forgery (SSRF) vulnerability in SQLBot, an intelligent data query system based on large language models and RAG, allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. SQLBot versions prior to 1.7.0 are affected, with the vulnerability exploitable through the /api/v1/datasource/check endpoint by configuring a malicious MySQL data source that triggers a LOAD DATA LOCAL INFILE attack during connection verification. The CVSS score of 8.7 with network-based attack vector and no privileges required indicates critical severity, though no KEV listing or EPSS data suggests exploitation in the wild has not yet been widely observed.
RemediationAI
Upgrade SQLBot to version 1.7.0 or later, which contains the security fix as documented in the release notes at https://github.com/dataease/SQLBot/releases/tag/v1.7.0. The specific patch commit ff98514827bad99b8fa4b39385adecc6e3d44355 available at https://github.com/dataease/SQLBot/commit/ff98514827bad99b8fa4b39385adecc6e3d44355 addresses the vulnerable data source verification logic. Until patching is completed, implement network segmentation to restrict access to the /api/v1/datasource/check endpoint to trusted administrative networks only, and deploy web application firewall rules to block requests containing suspicious JDBC parameters like local_infile. Additionally, ensure outbound MySQL connections from SQLBot servers are restricted to known legitimate database servers through firewall egress filtering to prevent connections to attacker-controlled rogue MySQL servers.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability exploits the MySQL LOAD DATA LOCAL INFILE feature through a Rogue MySQL Server attack pattern. The affected product SQLBot versions prior to 1.7.0 allow attackers to inject the extraJdbc parameter with local_infile=1 when testing MySQL data source connectivity. During the MySQL handshake protocol, an attacker-controlled malicious MySQL server can issue LOAD DATA LOCAL INFILE commands that force the SQLBot server (acting as MySQL client) to read local files and transmit their contents back to the attacker's server. This falls under CWE-73 (External Control of File Name or Path), as the attacker controls which files are accessed through the MySQL protocol's file reading capability. The vulnerability exists in the data source verification logic that does not properly sanitize JDBC connection parameters or restrict outbound MySQL connections.
Know when Sqlbot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
3DescriptionGitHub Advisory
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. An attacker can exploit the /api/v1/datasource/check endpoint by configuring a forged MySQL data source with a malicious parameter extraJdbc="local_infile=1". When the SQLBot backend attempts to verify the connectivity of this data source, an attacker-controlled Rogue MySQL server issues a malicious LOAD DATA LOCAL INFILE command during the MySQL handshake. This forces the target server to read arbitrary files from its local filesystem (such as /etc/passwd or configuration files) and transmit the contents back to the attacker. This issue was fixed in version 1.7.0.
Executive ViewAI
SQLBot versions before 1.7.0 contain an unauthenticated server-side request forgery vulnerability that allows attackers to read arbitrary files from affected servers without credentials. This directly exposes sensitive configuration files, database credentials, and application secrets, creating immediate risk for any organization running vulnerable SQLBot instances in production or accessible over the network.
Apply vendor patch (upgrade to SQLBot 1.7.0 or later). If immediate patching is not possible: restrict network access to the /api/v1/datasource/check endpoint using firewall rules or WAF policies, disable the datasource verification feature if operationally feasible, and implement robust monitoring for suspicious POST requests to that endpoint.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Related Vulnerabilities in SQLBot SSRF and SQL Injection
View all 2SQLBot is an intelligent data query system based on a large language model and RAG. [CVSS 6.1 MEDIUM]
Prompt injection in SQLBot 1.7.0 and earlier allows authenticated attackers to execute arbitrary SQL statements through
Stored cross-site scripting in SQLBot's SQText dashboard component allows any authenticated low-privilege user who can e
Remote code execution in SQLBot 1.5.0 and below allows authenticated users to inject malicious prompts through unsanitiz
Cross-workspace IDOR in SQLBot (DataEase) versions prior to 1.8.0 allows authenticated low-privilege users to read and m
Authenticated workspace members in DataEase SQLBot through 1.10.1 can rename and rewrite other users' private dashboards
A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend
A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps
Server-side request forgery (SSRF) in Dataease SQLBot up to version 1.6.0 allows high-privileged remote attackers to man
Stored cross-site scripting in SQLBot prior to 1.9.0 lets an authenticated user with logo-upload privileges persist a ma
Exploit-DB