SQL Injection Vulnerability in SuiteCRM by SalesAgility
CVE-2022-50589

9.3CRITICAL

Key Information:

Vendor: Suitecrm
Status: Suitecrm
Vendor: CVE Published:; 6 November 2025

What is CVE-2022-50589?

SuiteCRM prior to version 7.12.6 is susceptible to a SQL injection vulnerability in the 'export' functionality, specifically in the handling of the 'uid' parameter. This flaw allows remote unauthenticated attackers to exploit the vulnerability, leading to the potential execution of arbitrary code. Prompt attention to this vulnerability is essential to safeguard systems against unauthorized access and data breaches. Users are advised to upgrade to the latest version to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch