{"data":{"id":"ed1b2a97-eecf-49a9-bc06-35168472ad77","title":"CVE-2026-33324: SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the…","summary":"SQLBot, a Text-to-SQL system built on large language models and RAG, is affected in versions 1.7.0 and earlier. Its Text2SQL chat interface concatenates the user-provided question directly into the LLM prompt without filtering, and executes the SQL extracted from the LLM response without validation. An authenticated attacker can craft a malicious question to make the LLM generate and run arbitrary SQL, which, when connected to a PostgreSQL data source, can lead to remote code execution via COPY FROM PROGRAM.","solution":"Fixed in 1.7.1.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-33324","publishedAt":"2026-05-05T20:16:36.317Z","cveId":"CVE-2026-33324","cweIds":["CWE-89"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["SQLBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"SQLBot prompt injection in Text2SQL chat interface leading to SQL execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00603,"epssCheckedAt":"2026-11-08T12:09:02.001Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T06:12:12.749Z","patchAvailable":null,"disclosureDate":"2026-05-05T20:16:36.317Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"rag","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}