CVE-2026-32622: SQLBot stored prompt injection via Excel upload enables code execution

Summary

SQLBot, an LLM and RAG-based data query system, contains a stored prompt injection vulnerability in versions 1.5.0 and below. A missing permission check on the Excel upload API lets any authenticated user upload terminology with unsanitized payloads, which is injected into the LLM's system prompt without semantic fencing. An attacker can thereby steer the model into generating malicious PostgreSQL commands such as COPY ... TO PROGRAM, achieving remote code execution with postgres user privileges on the database or application server.

Mitigation

Fixed in v1.6.0.

Topics

• Retrieval-augmented generation

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
• HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database