CVE-2026-53555: Stored XSS via SVG Upload
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content. SQLBot later serves the file inline from the same application origin through GET /api/v1/system/assistant/picture/{filename}. When another user loads that generated resource, JavaScript embedded in the SVG executes in the SQLBot web application context, resulting in stored cross-site scripting with access to data and actions available to the victim's session. This issue is fixed in version 1.9.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SQLBotto a version that resolves this vulnerability.Fixed in 1.9.0
Event History
Frequently Asked Questions
Which deployments are affected?
SQLBot versions prior to 1.9.0 are affected. Version 1.9.0 contains the fix.
What access does an attacker need to exploit this issue?
The attacker must be authenticated and able to upload an assistant UI logo through PATCH /api/v1/system/assistant/ui. They can upload an image/svg+xml file containing active content.
Who is at risk after a malicious file is uploaded?
Any user who loads the generated picture resource can trigger the embedded JavaScript. The script executes in the SQLBot application origin and can access data and perform actions available to that victim's session.
What should be done if an upgrade cannot happen immediately?
The provided data identifies the vulnerable upload path and the inline file-serving path, but does not provide a documented workaround. Upgrade to 1.9.0 to apply the available fix.