Dataease Sqlbot vulnerabilities

• dataease sqlbot SQLBot through 1.10.1 Improper Access Control via Dashboard Update CVE-2026-93660 7.1 HighSeptember 18, 2026
• dataease sqlbot SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution CVE-2026-53557 7.7 HighSeptember 17, 2026
• dataease sqlbot Stored XSS via SVG Upload CVE-2026-53555 5.1 MediumSeptember 17, 2026
• dataease sqlbot SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read CVE-2026-53556 6.0 MediumSeptember 17, 2026
• dataease sqlbot SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing CVE-2026-53554 7.3 HighSeptember 17, 2026
• dataease sqlbot SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html CVE-2026-72743 5.1 MediumAugust 10, 2026
• dataease sqlbot SQLBot: Unauthorized Access Vulnerability CVE-2026-42463 8.6 HighMay 13, 2026
• dataease sqlbot SQLBot prompt injection allows arbitrary SQL execution and remote code execution CVE-2026-33324 9.4 CriticalMay 5, 2026
• dataease sqlbot Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery CVE-2026-5417 5.1 MediumApril 2, 2026
• dataease sqlbot SQLBot: RCE via SQL Injection in Excel Upload Endpoint CVE-2026-32950 8.6 HighMarch 20, 2026
• dataease sqlbot SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL CVE-2026-32949 8.7 HighMarch 20, 2026
• dataease sqlbot SQLBot: Remote Code Execution via Terminology Poisoning CVE-2026-32622 8.6 HighMarch 19, 2026
• dataease sqlbot Dataease SQLBot JWT Token auth.py validateEmbedded signature verification CVE-2025-15598 6.3 MediumMarch 3, 2026
• dataease sqlbot Dataease SQLBot API Endpoint assistant.py access control CVE-2025-15597 5.3 MediumMarch 2, 2026
• dataease sqlbot SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability CVE-2025-69285 7.7 HighJanuary 21, 2026