SQLBot CVE-2026-53555

Requires an authenticated SQLBot account with permission to upload the assistant UI logo (the uploader role reaching PATCH /api/v1/system/assistant/ui) on a version prior to 1.9.0, where the upload allowlist accepted .svg. Exploitation further requires a second victim user to load the stored logo served inline from the same origin via GET /api/v1/system/assistant/picture/{filename}, so it is not fully self-contained - it needs the passive interaction of another logged-in user. Limiting factors: no anonymous/unauthenticated path, impact bounded to the victim session's data and actions (no direct RCE or full-account takeover claimed), and it is neutralized by upgrading to 1.9.0 which drops SVG from accepted upload types.

This is a genuine but moderate-severity stored XSS, not a top-priority emergency. The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N, score 5.1) tells the real story: exploitation is network-reachable and low-complexity, but gated by two factors - the attacker must already hold an authenticated account with logo-upload rights (PR:L), and a victim must load the malicious resource (UI:P/passive). Impact is capped at Low confidentiality and Low integrity because the injected JavaScript is confined to whatever the victim's session can see and do, not full application compromise. No EPSS score, no CISA KEV listing, and no public POC were provided, so there is no signal of active or automated exploitation - this is 'no public exploit identified at time of analysis.' The patch is confirmed available (v1.9.0, commit 835eefcb) and the fix is a one-line allowlist change removing .svg from accepted upload types, which is a clear, low-effort mitigation. Net: prioritize as a normal patch-cycle item, elevated only for deployments where low-privileged users can upload assistant logos and other users share the same origin.

An authenticated SQLBot user with uploader privileges submits a crafted image/svg+xml file containing embedded <script> as the assistant UI logo via PATCH /api/v1/system/assistant/ui. When any other user's browser later renders that logo inline from GET /api/v1/system/assistant/picture/{filename}, the embedded JavaScript executes in the SQLBot origin, letting the attacker act with the victim's session privileges. No public exploit code was identified, but the technique is well-understood and the fixing commit effectively documents the vector.