CVE-2025-69285— SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-69285
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel endpoint, allowing a remote unauthenticated attacker to upload arbitrary Excel/CSV files and inject data directly into the PostgreSQL database. The endpoint is explicitly added to the authentication whitelist, causing the TokenMiddleware to bypass all token validation. Uploaded files are parsed by pandas and inserted into the database via to_sql() with if_exists='replace' mode. The vulnerability has been fixed in v1.5.0. No known workarounds are available.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
关键功能的认证机制缺失
Source: NVD (National Vulnerability Database)
Vulnerability Title
SQLBot 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SQLBot是DataEase开源的一个基于大模型和RAG的智能问数系统。 SQLBot 1.5.0之前版本存在访问控制错误漏洞，该漏洞源于/api/v1/datasource/uploadExcel端点缺少身份验证，可能导致未经身份验证的攻击者上传任意文件并注入数据到数据库。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-69285
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-69285
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: SQLBot
- CVE-2026-33324
SQLBot prompt injection allows arbitrary SQL execution and r - CVE-2026-5417
Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_ht - CVE-2026-32950
SQLBot: RCE via SQL Injection in Excel Upload Endpoint - CVE-2026-32949
SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL - CVE-2026-32622
SQLBot: Remote Code Execution via Terminology Poisoning
Same vendor: dataease
- CVE-2026-33324
SQLBot prompt injection allows arbitrary SQL execution and r - CVE-2026-40901
DataEase: Quartz Deserialization → Remote Code Execution - CVE-2026-40900
DataEase has SQL Injection via Stacked Queries - CVE-2026-40899
DataEase has an Arbitrary File Read Vulnerability - CVE-2026-33207
DataEase SQL Injection Vulnerability
Same weakness: CWE-306
- CVE-2021-47940
WordPress Download From Files 1.48 Arbitrary File Upload - CVE-2021-47936
OpenCATS 0.9.4 Remote Code Execution via Resume Upload - CVE-2021-47933
WordPress MStore API 2.0.6 Arbitrary File Upload - CVE-2026-8185
UGREEN CM933 Administrative missing authentication - CVE-2026-42302
FastGPT: Unauthenticated Remote Code Execution (RCE) via cod
V. Comments for CVE-2025-69285
No comments yet