CVE-2026-85689 | llmware-ai llmware up to 0.4.6 Collection Database Layer llmware/resources.py filter/lookup sql injection

September 4, 2026 Yanac

A vulnerability categorized as critical has been discovered in llmware-ai llmware up to 0.4.6. Affected is the function Library.block_lookup/Query.text_query_with_custom_filter of the file llmware/resources.py of the component Collection Database Layer. The manipulation of the argument filter/lookup results in sql injection.

This vulnerability is identified as CVE-2026-85689. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More