SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component (CVE-2026-71622)

The Zhao-github APiAdmin v5.0.1 contains an SQL injection vulnerability in its User.php component. This vulnerability enables a remote attacker to execute unauthorized SQL queries, potentially leading to disclosure of sensitive information stored in the backend database. No further technical details or exploitation methods are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive information from the database, compromising confidentiality. There is no information about privilege escalation, data modification, or denial of service impacts. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.