---
id: "CVE-2026-121453"
kind: "vulnerability"
aliases: ["CVE-2026-121453"]
title: "SQLBot: path traversal in importToDb lets admins read server files"
severity: "medium"
cvss: 5.1
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "self-hosted", "sqlbot", "text-to-sql"]
not_affected_if: ["auth-required", "default-config"]
published_at: "2026-11-03T16:17:24+00:00"
first_seen_at: "2026-11-03T16:21:43+00:00"
updated_at: "2026-11-03T16:24:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121453", "first_seen_at": "2026-11-03T16:21:43+00:00"}]
---

# SQLBot: path traversal in importToDb lets admins read server files

SQLBot through 1.10.3 has a path traversal flaw in its importToDb endpoint, where the filePath parameter is not sanitized. An authenticated workspace administrator can import arbitrary server files, including other workspaces' uploads, into queryable tables and read their contents.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed SQLBot version against the affected range `through 1.10.3`
- Review whether the importToDb endpoint is reachable by workspace administrators in your deployment

## Fix

- Fixed version: unknown (the Patch link is listed in the sources, but the version is not stated)

## Timeline

- 2026-11-03T16:21:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121453

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/sqlbot-through-1.10.3-path-traversal-via-datasource-importtodb-endpoint
- [fix] Patch: github.com https://github.com/dataease/SQLBot/commit/3d15c67b4de6ed9420daa9a34e4dc371ebbf4765

## From the sources

SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace administrators to read files via an unsanitized filePath parameter. Attackers can supply absolute paths or ../ sequences to import CSV or spreadsheet files, including other workspaces' uploads and server files, into queryable excel_* tables.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_