Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided question parameter is directly concatenated into the LLM prompt without filtering or escaping, and the SQL extracted from the LLM response is executed against the database without validation or sanitization. An authenticated attacker can craft a malicious question to manipulate the LLM into generating and executing arbitrary SQL statements. When connected to a PostgreSQL data source, this can lead to remote code execution via COPY FROM PROGRAM. This issue has been fixed in version 1.7.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-05 | 2 | Disclosure2 |
| 2026-05-06 | 1 | Disclosure1 |
CVE-2026-33324 Prompt Injection and SQL Injection in SQLBot 1.7.0 Leading to Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33324
Post summary
The snippet announces CVE-2026-33324, detailing prompt injection and SQL injection flaws in SQLBot 1.7.0 that enable remote code execution, but does not provide a PoC, exploit code, or remediation guidance.
🚨*CVE* CVE-2026-33324 SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt… https://www.cve.org/CVERecord?id=CVE-2026-33324 ----- Traducción: CVE-2026-33324 SQL… http://infoflow.cloud`
Post summary
The post announces CVE-2026-33324, highlighting a prompt injection flaw in SQLBot’s Text2SQL interface for versions up to 1.7.0, and links to the official CVE record.
CVE-2026-33324 SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt… https://www.cve.org/CVERecord?id=CVE-2026-33324
Post summary
The tweet announces CVE-2026-33324, stating that SQLBot’s Text2SQL chat interface (v1.7.0 and earlier) is vulnerable to a prompt injection flaw. No PoC, exploit code, patch, or active exploitation information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fit2cloud | sqlbot | - | - | - |