CVE-2026-53555: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in dataease SQLBot
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.
AI Analysis
Technical Summary
SQLBot, an intelligent Text-to-SQL system, allowed authenticated users before version 1.9.0 to upload SVG images containing active JavaScript content via the PATCH /api/v1/system/assistant/ui endpoint. The application stored these SVG files without sanitizing or validating embedded scripts. Later, when other users accessed these SVGs through GET /api/v1/system/assistant/picture/{filename}, the malicious JavaScript executed within the victim's browser context, leading to stored cross-site scripting (CWE-79). This could allow attackers to perform actions or access data available to the victim's session. The issue is resolved in SQLBot version 1.9.0.
Potential Impact
Exploitation of this vulnerability allows an attacker with authenticated upload privileges to inject malicious JavaScript into SVG files served by SQLBot. When other users load these SVGs, the script executes in their browser context, potentially compromising session data and enabling unauthorized actions within the application. The CVSS 4.0 base score is 5.1 (medium severity), reflecting network attack vector, low complexity, and limited impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade SQLBot to version 1.9.0 or later, where this vulnerability is fixed by proper sanitization of SVG uploads. Until upgrading, restrict upload permissions to trusted users only and avoid loading SVG files from untrusted sources. Patch status is confirmed fixed in version 1.9.0.
CVE-2026-53555: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in dataease SQLBot
Description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.
CVSS v4.0
Score 5.1medium
Affected software
dataease
SQLBot
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
SQLBot, an intelligent Text-to-SQL system, allowed authenticated users before version 1.9.0 to upload SVG images containing active JavaScript content via the PATCH /api/v1/system/assistant/ui endpoint. The application stored these SVG files without sanitizing or validating embedded scripts. Later, when other users accessed these SVGs through GET /api/v1/system/assistant/picture/{filename}, the malicious JavaScript executed within the victim's browser context, leading to stored cross-site scripting (CWE-79). This could allow attackers to perform actions or access data available to the victim's session. The issue is resolved in SQLBot version 1.9.0.
Potential Impact
Exploitation of this vulnerability allows an attacker with authenticated upload privileges to inject malicious JavaScript into SVG files served by SQLBot. When other users load these SVGs, the script executes in their browser context, potentially compromising session data and enabling unauthorized actions within the application. The CVSS 4.0 base score is 5.1 (medium severity), reflecting network attack vector, low complexity, and limited impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade SQLBot to version 1.9.0 or later, where this vulnerability is fixed by proper sanitization of SVG uploads. Until upgrading, restrict upload permissions to trusted users only and avoid loading SVG files from untrusted sources. Patch status is confirmed fixed in version 1.9.0.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-09T18:13:07.263Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aac5fee55bf5e2cf5f75524
Added to database: 09/17/2026, 21:47:26 UTC
Last enriched: 09/17/2026, 22:02:13 UTC
Last updated: 09/17/2026, 22:12:02 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.