Repository navigation
[new-cve] CVE-2026-53555 — SQLBot is an intelligent Text-to-SQL system based on large language models and R #149
Description
New CVE — AI/LLM Related
CVE ID: CVE-2026-53555
Published: 2026-09-17T22:16:59.917
CVSS Score: N/A
Description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.
Suggested OWASP Mapping
Manual mapping required
Suggested Action
Review this CVE against the OWASP GenAI Crosswalk entries. Update data/incidents.json or relevant mapping files if this CVE represents a real-world exploitation of a mapped threat.
Activity
emmanuelgjr commentedon Oct 1, 2026
Closed as noted — not recorded as an incident.
CVE-2026-53555 is a stored XSS in SQLBot (< 1.9.0): an SVG uploaded as the assistant's UI logo is served inline without sanitisation. It meets the letter of the CVE rule in
docs/TRIAGE_RULES.md, because it is GenAI tooling with an advisory and a fixed version. But nothing about the flaw involves the model, retrieval or the data the AI handles; the only mapping that could be drafted rested on the product category, not the mechanism. The maintainer decided not to add it to the index.SQLBot's three other 1.9.0 CVEs (#148, #150, #151) are recorded in #183, because each one reaches the data or the host behind the Text-to-SQL pipeline. Reopen if a reviewer reads this one differently.