---
id: CVE-2026-82526
title: >-
  R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows
  unauthenticated attackers to execute arbitrary SQL statements by manipulating
  the index name parameter in the vector index creation endpoint
summary: >-
  R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows
  unauthenticated attackers to execute arbitrary SQL statements by manipulating
  the index name parameter in the vector index creation endpoint. The index name
  is …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-89
published: '2026-09-03'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T20:18:59.270'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82526'
references:
  - url: 'https://github.com/SciPhi-AI/R2R/issues/2309'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/r2r-sql-injection-via-vector-index-creation-endpoint
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00707
epssPercentile: 0.51396
ingestedAt: '2026-09-08T21:11:12.291Z'
---

## Overview

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.