Executive brief
A security vulnerability has been identified in Griptape, a framework used for building AI applications with Large Language Models (LLMs). The flaw exists in the SQL tool component, which allows AI agents to interact with databases. If exploited, a remote attacker could perform unauthorized database queries, potentially leading to the exposure or modification of sensitive business data.
Technical details
A SQL injection vulnerability exists in griptape-ai griptape version 0.19.4 within the SqlTool component, specifically located in 'griptape/tools/sql/tool.py'. The vulnerability stems from improper neutralization of special elements used in SQL commands (CWE-89). A remote attacker with low privileges can exploit this by providing manipulated input that alters the intended SQL logic. This can lead to unauthorized data access, modification, or deletion within the connected database. A public exploit (PoC) is reportedly available, and the vendor has not yet provided a patch or official response.
Affected products
- griptape-ai griptape 0.19.4
Timeline
- 2026-04-05: disclosed: Vulnerability disclosed and exploit made public.
- 2026-04-05: advisory: Initial advisory published by VulDB.