CVE-2026-82527 | SciPhi-AI R2R up to 3.6.6 Retrieval Search Endpoint filter sql injection

September 3, 2026 Yanac

A vulnerability identified as critical has been detected in SciPhi-AI R2R up to 3.6.6. This issue affects some unknown processing of the component Retrieval Search Endpoint. Performing a manipulation of the argument filter results in sql injection.

This vulnerability is cataloged as CVE-2026-82527. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More