CVE-2026-53557 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
An authenticated user can achieve remote code execution via second-order SQL injection in the Excel datasource configuration of SQLBot.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-53557?
CVE-2026-53557 is a high-severity SQL injection vulnerability in dataease SQLBot, published on 17 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBot stores that value without safe identifier handling. When the same datasource is later removed through DELETE /api/v1/datasource/{id}, the stored value is interpolated into datasource cleanup SQL and executed by PostgreSQL. This second-order SQL injection can invoke PostgreSQL COPY TO PROGRAM and execute arbitrary operating-system commands with the privileges of the postgres process inside the SQLBot container. This issue is fixed in version 1.9.0.
Weakness: CWE-89
Which versions are affected by CVE-2026-53557?
How do I fix CVE-2026-53557?
No fix has been published for CVE-2026-53557 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2026-53557 being exploited?
There is no known exploitation of CVE-2026-53557 in the wild and no public exploit code.
Sources
Also known as GHSA-vxwj-843f-9c9g.