# CVE-2026-7299: Appsmith stored XSS in SQL query editor autocomplete

Source: https://junglewise.ai/threats/cve-2026-7299-appsmith-stored-xss-in-sql-query-editor-autocomplete  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-02. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2026-7299 · Severity: medium · CVSS 6.3 · Published 2026-06-02

Appsmith, a platform for building internal business tools, contains a security vulnerability in its SQL query editor. An attacker with developer-level access can name a database table or column with malicious code. When other team members use the autocomplete feature in the editor, this code executes in their browser, potentially allowing the attacker to steal session information or take over the workspace.

Technologies: [Appsmith](https://junglewise.ai/threats/technologies/appsmith). Vendors: [Appsmith](https://junglewise.ai/threats/vendors/appsmith).

## Quick answers

**Is CVE-2026-7299 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7299 being exploited in the wild.

**How severe is CVE-2026-7299?** Medium severity, with a CVSS score of 6.3, published 2 June 2026.

**Which products and versions are affected?** Appsmith versions prior to 2.1.

**Is there a fix for CVE-2026-7299?** A patch was published on 2026-04-24: Fix committed to Appsmith repository Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-7299 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-7299?** Check whether you run Appsmith at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stored cross-site scripting (XSS) vulnerability exists in Appsmith versions prior to 2.1. The vulnerability is located in the SQL autocomplete rendering logic within `hintHelpers.ts`, where the application overrides CodeMirror's default safe rendering with a custom callback that uses `innerHTML` to display database metadata. An authenticated attacker with 'Developer' privileges can create a database object (table or column) containing a JavaScript payload. When another user triggers the autocomplete dropdown for that datasource, the payload is rendered as raw HTML and executed in the context of the victim's session. This can lead to session hijacking or unauthorized API actions. The fix involves migrating the renderer to use `textContent` instead of `innerHTML`.

## Affected products

- Appsmith Appsmith versions prior to 2.1

## Timeline

- 2026-03-30: other: Initial discovery of the vulnerability
- 2026-04-24: patched: Fix committed to Appsmith repository
- 2026-06-02: disclosed: CVE-2026-7299 published

## References

- [https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit](https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit)
- [https://github.com/appsmithorg/appsmith/commit/99d69180919981ed9bc5484050d809a5bec68acc](https://github.com/appsmithorg/appsmith/commit/99d69180919981ed9bc5484050d809a5bec68acc)
- [https://github.com/appsmithorg/appsmith/pull/41666](https://github.com/appsmithorg/appsmith/pull/41666)
- [https://github.com/appsmithorg/appsmith/releases/tag/v2.1](https://github.com/appsmithorg/appsmith/releases/tag/v2.1)
- [https://github.com/appsmithorg/appsmith/security/advisories/GHSA-vvxf-f8q9-86gh](https://github.com/appsmithorg/appsmith/security/advisories/GHSA-vvxf-f8q9-86gh)
- [https://www.kb.cert.org/vuls/id/265691](https://www.kb.cert.org/vuls/id/265691)

## Related threats

- [Appsmith OS command execution via supervisord XML-RPC interface](https://junglewise.ai/threats/cve-2026-50189-appsmith-os-command-execution-via-supervisord-xml-rpc-interface)
- [Appsmith SSRF in WebClientUtils via improper host validation](https://junglewise.ai/threats/cve-2026-5418-appsmith-ssrf-in-webclientutils-via-improper-host-validation)
- [Appsmith missing authentication in instance management API endpoints](https://junglewise.ai/threats/cve-2026-34411-appsmith-missing-authentication-in-instance-management-api)