Executive brief
SQLBot is a Text-to-SQL system that allows users to query databases using natural language. An authenticated user can upload an SVG file as a logo for the assistant UI, but prior to version 1.9.0, the application fails to sanitize embedded JavaScript code within the SVG. When other users view the logo, the malicious JavaScript executes in their browser session, allowing an attacker to steal session data, perform unauthorized actions, or compromise other users' accounts.
Technical details
This is a stored cross-site scripting (XSS) vulnerability in the PATCH /api/v1/system/assistant/ui endpoint. An authenticated attacker can submit an SVG file containing embedded JavaScript as the assistant UI logo. SQLBot stores the unsanitized SVG file and later serves it inline (same origin) via GET /api/v1/system/assistant/picture/{filename}. When another user accesses the logo, the embedded JavaScript executes within the SQLBot application context with access to the victim's session cookies and capabilities. The fix in version 1.9.0 removes SVG support entirely from the logo upload, restricting uploads to JPG and PNG formats only.
Affected products
- DataEase SQLBot prior to 1.9.0
Timeline
- 2026-09-17: disclosed: CVE published
- 2026-06-03: patched: Fix released in version 1.9.0