SQL Injection Vulnerability in SQLBot Before Version 1.9.0

CVE-2026-53554

What is CVE-2026-53554?

The SQLBot system, which utilizes large language models for text-to-SQL capabilities, has a vulnerability in the POST /api/v1/datasource/parseExcel endpoint. Prior to 1.9.0, the endpoint incorrectly handled multipart filename data submitted by attackers, allowing them to specify file names that could lead to the execution of arbitrary Python code. Specifically, when a crafted multipart upload is processed, the application writes the content to disk before validating the uploaded spreadsheet. If a parsing failure occurs, the potentially harmful file remains in the system, posing a significant risk as subsequent SQLBot sessions or migrations could execute the planted code, compromising the application's integrity.

References