A vulnerability has been found in Dataease SQLBot up to 1.4.0.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 2, 2026 · NIST NVD

   Detected

   A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.0 mitigates this issue. The name of th

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.0 mitigates this issue. The name of th

Affected

• cpe fit2cloud/sqlbotversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2025-15597

  A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The e

  nvd.nist.gov

References

• Product · github.com
• Patch · github.com
• Release Notes · github.com
• Exploit · github.com
• Exploit · github.com
• Exploit · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com