{"id":"CVE-2026-53555","title":"SQLBot is an intelligent Text-to-SQL system based on large language models and RAG","summary":"SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the …","severity":"medium","cvss":5.1,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","cwe":["CWE-79"],"vendor":"dataease","product":"SQLBot","affected":["SQLBot < 1.9.0"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T14:17:18.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-53555","references":[{"url":"https://github.com/dataease/SQLBot/commit/835eefcb39b595248ea006f3cfce445d2f49167e","label":"security-advisories@github.com"},{"url":"https://github.com/dataease/SQLBot/pull/1160","label":"security-advisories@github.com"},{"url":"https://github.com/dataease/SQLBot/releases/tag/v1.9.0","label":"security-advisories@github.com"},{"url":"https://github.com/dataease/SQLBot/security/advisories/GHSA-v23m-5pvq-xcgx","label":"security-advisories@github.com"},{"url":"https://github.com/dataease/SQLBot/security/advisories/GHSA-v23m-5pvq-xcgx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00362,"epssPercentile":0.29991,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-18T13:14:34.338598Z"},"cvssSource":"cna","ingestedAt":"2026-09-17T22:30:21.398Z","slug":"CVE-2026-53555","body":"## Overview\n\nSQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":28.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":206839,"id":"CVE-2026-53555","ts":1789738972599,"field":"exploit_available","old":"false","new":"true"}]}