CVE-2026-33324 Details
Description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided question parameter is directly concatenated into the LLM prompt without filtering or escaping, and the SQL extracted from the LLM response is executed against the database without validation or sanitization. An authenticated attacker can craft a malicious question to manipulate the LLM into generating and executing arbitrary SQL statements. When connected to a PostgreSQL data source, this can lead to remote code execution via COPY FROM PROGRAM. This issue has been fixed in version 1.7.1.
A critical prompt injection vulnerability has been identified in SQLBot's Text-to-SQL chat interface, affecting versions through 1.7.0. The vulnerability arises because user-provided questions are directly added to the language model (LLM) prompt without any filtering or escaping. SQL extracted from the LLM response is then executed against the database without validation or sanitization. This allows an authenticated attacker to manipulate the LLM into generating and executing arbitrary SQL statements. When connected to a PostgreSQL data source, this exploitation can lead to remote code execution via the 'COPY FROM PROGRAM' command.
Users are advised to upgrade SQLBot to version 1.7.1, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/dataease/SQLBot/security/advisories/GHSA-q2q6-gqqh-4xrx | CISA-ADP | ExploitVendor Advisory |
| https://github.com/dataease/SQLBot/security/advisories/GHSA-q2q6-gqqh-4xrx | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| fit2cloud sqlbot | < 1.7.1 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 8, 2026 | Initial Analysis | [email protected] |
| May 5, 2026 | New CVE Received | [email protected] |
| May 5, 2026 | CVE Modified | CISA-ADP |