Threats Tagged 'ghsa-mxfr-6hcw-j9rq'
View all threats tagged with 'ghsa-mxfr-6hcw-j9rq'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-mxfr-6hcw-j9rq'
Click on any threat for detailed analysis and mitigation recommendations
Langroid has Prompt to SQL Injection, Leading to RCE (CVE-2026-25879)CVE-2026-25879 0 Langroid versions prior to 0.63.0 contain a vulnerability in the SQLChatAgent component where SQL queries generated by a large language model (LLM) are executed without sufficient validation. This allows an attacker who can influence the LLM's input to inject SQL commands that leverage database-specific features (e.g., PostgreSQL's COPY FROM PROGRAM) to execute arbitrary system commands, resulting in remote code execution (RCE) on the database host. The vulnerability arises when the database role has elevated privileges that permit such operations. The issue is fixed in version 0.63.0 by restricting SQLChatAgent to a safe subset of SQL commands and blocking dangerous patterns by default. The vulnerability is critical due to its potential for full system compromise via the database server. Join the discussion | GCVE Database | 05/27/2026, 19:38:58 UTC Added: 07/02/2026, 22:58:29 UTC |
Showing 1 to 1 of 1 result