Every CVE whose affected-product data names Fit2cloud Sqlbot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (8)
CVE-2026-32950 — CVSS 8.8 (high): SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL…
CVE-2026-33324 — CVSS 8.8 (high): SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat…
CVE-2026-32622 — CVSS 8.8 (high): SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 and below contain a Stored Prompt…
CVE-2026-42463 — CVSS 8.1 (high): SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR…
CVE-2026-32949 — CVSS 7.5 (high): SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request…
CVE-2025-15597 — CVSS 6.3 (medium): A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistan…
CVE-2025-69285 — CVSS 6.1 (medium): SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing…
CVE-2025-15598 — CVSS 3.7 (low): A vulnerability was found in Dataease SQLBot up to 1.5.1. This impacts the function validateEmbedded of the file backend/apps/system/middlew…