{"data":{"id":"1115bfed-921e-4f8d-98eb-21e5f4756bb9","title":"CVE-2026-32949: SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a…","summary":"SQLBot, an LLM and RAG-based data query system, has an SSRF vulnerability in versions prior to 1.7.0. An attacker can abuse the /api/v1/datasource/check endpoint with a forged MySQL data source using extraJdbc=\"local_infile=1\", so the backend connects to an attacker-controlled rogue MySQL server that issues a LOAD DATA LOCAL INFILE command during the handshake. This makes the target read arbitrary local files, such as /etc/passwd or configuration files, and send their contents back to the attacker.","solution":"This issue was fixed in version 1.7.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-32949","publishedAt":"2026-03-20T05:16:14.387Z","cveId":"CVE-2026-32949","cweIds":["CWE-73","CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["SQLBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"SQLBot server-side request forgery via datasource check endpoint","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00444,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:10:55.681Z","patchAvailable":null,"disclosureDate":"2026-03-20T05:16:14.387Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}