Priority HIGH 77
SQLBot is an intelligent data query system based on a large language model and RAG.
1Panel-dev
Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9
Exploited now
1Panel-dev records in CISA KEVNo 1Panel-dev vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Sqlbot · all components
TI-2026-25735 CVE-2026-33324
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
Priority HIGH 76
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.
TI-2025-42730 CVE-2025-69285
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Priority HIGH 73
SQLBot is an intelligent data query system based on a large language model and RAG.
TI-2026-30751 CVE-2026-42463
SQLBot: Unauthorized Access Vulnerability
Priority HIGH 72
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.
Priority HIGH 72
SQLBot is an intelligent data query system based on a large language model and RAG.
Priority HIGH 72
SQLBot is an intelligent data query system based on a large language model and RAG.
TI-2025-14229 CVE-2025-15598 · GHSA-4wx6-wj3q-mf77
Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
Priority MEDIUM 61
A vulnerability was found in Dataease SQLBot up to 1.5.1.
TI-2025-14228 CVE-2025-15597 · GHSA-7gmx-vw6r-9xrm
Dataease SQLBot API Endpoint assistant.py access control
Priority MEDIUM 57
A vulnerability has been found in Dataease SQLBot up to 1.4.0.