CVE-2026-85689 Details
Description
llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator only checks keys against an allow-list and never sanitizes values. Attacker-controlled filter values reaching the public API via Library.block_lookup and Query.text_query_with_custom_filter / text_query_by_author_or_speaker can neutralize the intended filter to disclose rows the caller was scoped out of (cross-document/cross-collection disclosure); on PostgreSQL the flaw permits boolean- and UNION-based SQL injection.
A SQL injection vulnerability has been identified in llmware version 0.4.6, specifically within the collection-database layer. This issue arises because filter and lookup values are directly interpolated into SQL WHERE clauses without proper parameterization or escaping, affecting both SQLite and PostgreSQL backends. The vulnerability allows attacker-controlled filter values to bypass intended restrictions, leading to unauthorized data disclosure across documents or collections. In the case of PostgreSQL, this flaw also enables boolean- and UNION-based SQL injection.
Users are advised to update to the patched version of llmware, which is available on the llmware GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/llmware-ai/llmware | [email protected] | ProductSource CodeVendor |
| https://github.com/llmware-ai/llmware/blob/v0.4.6/llmware/resources.py | [email protected] | Source CodeVendor |
| https://github.com/llmware-ai/llmware/issues/1304 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/llmware-0.4.6-sql-injection-via-unescaped-filter-values | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| llmware | <= 0.4.6 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |