CVE-2026-53556 | DataEase SQLBot up to 1.8.x Preview Data datasource.py table_name sql injection

September 17, 2026 Yanac

A vulnerability classified as critical has been found in DataEase SQLBot up to 1.8.x. The affected element is an unknown function of the file backend/apps/datasource/crud/datasource.py of the component Preview Data. Performing a manipulation of the argument table_name results in sql injection.

This vulnerability is cataloged as CVE-2026-53556. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More