EUVD-2026-70701
GHSA-j3pv-p6h2-grgg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network SQLi with read-only database exfiltration; S:U as no scope change beyond the application database, I:N and A:N per description.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoint. Attackers can exploit the direct interpolation of filter keys into the SQL WHERE clause without parameterization or escaping to perform time-based and boolean-based data exfiltration from the application database.
AnalysisAI
Unauthenticated SQL injection in SciPhi-AI R2R through version 3.6.6 exposes the application database to blind data exfiltration via the retrieval search endpoint's filter key parameter. The root cause is direct string interpolation of attacker-controlled filter keys into SQL WHERE clauses with no parameterization or escaping, enabling both time-based and boolean-based extraction techniques. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of R2R versions through 3.6.6, targeting the retrieval search endpoint's filter key parameter in the chunks search query. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N, score 8.7) is well-calibrated to the described behavior: unauthenticated network access, no complexity prerequisites, high confidentiality impact, and no integrity or availability impact - accurately reflecting a read-only blind SQLi exfiltration path with no apparent write exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade R2R beyond version 3.6.6 - consult the SciPhi-AI GitHub repository (https://github.com/SciPhi-AI/R2R/issues/2308) and the VulnCheck advisory (https://www.vulncheck.com/advisories/r2r-sql-injection-via-retrieval-search-filter-key) to confirm the specific patched release version, which is not independently confirmed from available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running SciPhi-AI R2R through version 3.6.6 and isolate them from public-facing networks or restrict access to the retrieval search endpoint to authorized users only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated stacked SQL injection in SciPhi-AI R2R through version 3.6.6 lets remote attackers execute arbitrary SQL
Insecure Direct Object Reference in R2R's conversation API through version 3.6.5 enables any authenticated user to modif
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today