CVE-2026-32949 SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
An attacker can exploit an SSRF vulnerability in SQLBot to read arbitrary files from the server via a rogue MySQL connection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-32949?
CVE-2026-32949 is a high-severity server-side request forgery vulnerability in dataease SQLBot, published on 20 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. An attacker can exploit the /api/v1/datasource/check endpoint by configuring a forged MySQL data source with a malicious parameter extraJdbc="local_infile=1". When the SQLBot backend attempts to verify the connectivity of this data source, an attacker-controlled Rogue MySQL server issues a malicious LOAD DATA LOCAL INFILE command during the MySQL handshake. This forces the target server to read arbitrary files from its local filesystem (such as /etc/passwd or configuration files) and transmit the contents back to the attacker. This issue was fixed in version 1.7.0.
Which versions are affected by CVE-2026-32949?
It affects 1 product.
Products include Fit2cloud Sqlbot.
How do I fix CVE-2026-32949?
No fix has been published for CVE-2026-32949 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-32949 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-32949 exists.
Other vulnerabilities in dataease SQLBot
- CVE-2026-33324 SQLBot prompt injection allows arbitrary SQL execution and remote code execution
- CVE-2026-42463 SQLBot: Unauthorized Access Vulnerability
- CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint
- CVE-2026-32622 SQLBot: Remote Code Execution via Terminology Poisoning
- CVE-2025-69285 SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Sources
Also known as GHSA-wqj3-xcxf-j9m9.