{"data":{"id":"6e83adb8-c96c-4418-8ad4-d3b89ff2619d","title":"GHSA-mxfr-6hcw-j9rq: Langroid has Prompt to SQL Injection, Leading to RCE","summary":"Langroid versions before 0.63.0 let SQLChatAgent run SQL that an LLM generates from input it can be steered to take, including data returned to the model. When the configured database role holds privileges such as PostgreSQL pg_execute_server_program, MySQL FILE, or MSSQL xp_cmdshell, an attacker can use dialect-specific primitives like COPY ... FROM PROGRAM to execute commands on the database host. The advisory's proof of concept shows execution of the id command through this path.","solution":"Fixed in vX.Y by defaulting SQLChatAgent to a SELECT-only sqlglot-parsed statement allowlist with a dialect-aware dangerous-pattern blocklist. Setting allow_dangerous_operations=True restores the previous unrestricted behavior, intended only for trusted deployments.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-mxfr-6hcw-j9rq","publishedAt":"2026-05-27T19:38:58.000Z","cveId":"CVE-2026-25879","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","supply_chain"],"issueType":"vulnerability","affectedPackages":["langroid@< 0.63.0 (fixed: 0.63.0)"],"affectedPackageNames":["langroid"],"affectedPackageRefs":["pypi:langroid"],"affectedVendors":[],"affectedVendorsRaw":["Langroid","SQLChatAgent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00695,"epssCheckedAt":"2026-10-15T06:09:21.480Z","kevDateAdded":null,"advisoryAliases":["GHSA-mxfr-6hcw-j9rq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-27T19:38:58.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"]}}