Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-69285

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel endpoint, allowing a remote unauthenticated attacker to upload arbitrary Excel/CSV files and inject data directly into the PostgreSQL database. The endpoint is explicitly added to the authentication whitelist, causing the TokenMiddleware to bypass all token validation. Uploaded files are parsed by pandas a
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:babef4b6a26793bff89d520ebb22c93d8973b00e9f0e9e33e9b9b1f17608a44d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"SQLBot","vendor":"dataease","versions":[{"status":"affected","version":"< 1.5.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8059280c94f322d3cad71a565a4d917885e16273564662af615bb7861bf12f50 · sha256:69a5c5f8bca2e7d3… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7.7,"baseSeverity":"HIGH","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:8059280c94f322d3cad71a565a4d917885e16273564662af615bb7861bf12f50 · sha256:69a5c5f8bca2e7d3… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-306","description":"CWE-306: Missing Authentication for Critical Function","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:8059280c94f322d3cad71a565a4d917885e16273564662af615bb7861bf12f50 · sha256:69a5c5f8bca2e7d3… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"name":"https://github.com/dataease/SQLBot/releases/tag/v1.5.0","tags":["x_refsource_MISC"],"url":"https://github.com/dataease/SQLBot/releases/tag/v1.5.0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8059280c94f322d3cad71a565a4d917885e16273564662af615bb7861bf12f50 · sha256:69a5c5f8bca2e7d3… · /containers/cna/references/1
{"name":"https://github.com/dataease/SQLBot/security/advisories/GHSA-crfm-cch4-hjpv","tags":["x_refsource_CONFIRM"],"url":"https://github.com/dataease/SQLBot/security/advisories/GHSA-crfm-cch4-hjpv"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8059280c94f322d3cad71a565a4d917885e16273564662af615bb7861bf12f50 · sha256:69a5c5f8bca2e7d3… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer