Description
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. An attacker can exploit the /api/v1/datasource/check endpoint by configuring a forged MySQL data source with a malicious parameter extraJdbc="local_infile=1". When the SQLBot backend attempts to verify the connectivity of this data source, an attacker-controlled Rogue MySQL server issues a malicious LOAD DATA LOCAL INFILE command during the MySQL handshake. This forces the target server to read arbitrary files from its local filesystem (such as /etc/passwd or configuration files) and transmit the contents back to the attacker. This issue was fixed in version 1.7.0.
INFO
Published Date :
2026-03-20T04:08:43.142Z
Last Modified :
2026-03-20T19:50:35.555Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-32949 vulnerability.
| Vendors | Products |
|---|---|
| Dataease |
|
| Fit2cloud |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-32949.
