CVE-2026-32950: SQLBot SQL injection via uploadExcel endpoint enables remote code execution

Summary

SQLBot, an LLM and RAG-based data query system, contains a SQL injection flaw in the /api/v1/datasource/uploadExcel endpoint in versions prior to 1.7.0. Excel sheet names are concatenated into PostgreSQL table names and embedded in COPY statements via f-strings, so any authenticated user, even the lowest-privileged, can reach remote code execution through a two-stage upload that bypasses the 31-character sheet name limit. Confirmed impacts include command execution as the postgres user, exfiltration of files such as /etc/passwd and /etc/shadow, and full database takeover.

Mitigation

Fixed in 1.7.0.

Topics

• Retrieval-augmented generation

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online