CVE-2026-53557 | dataease SQLBot up to 1.8.x Datasource Cleanup /api/v1/datasource/ sheet[“tableName”] sql injection

A vulnerability, which was classified as critical, has been found in dataease SQLBot up to 1.8.x. This affects an unknown function of the file /api/v1/datasource/ of the component Datasource Cleanup. The manipulation of the argument sheet[“tableName”] leads to sql injection.

This vulnerability is documented as CVE-2026-53557. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More