CVE-2026-86123

HIGH 8.7

SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints

CVSS Score

8.7

EPSS Score

0.0%

EPSS Percentile

0th

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's network without authentication.

CWE	CWE-918
Vendor	sqlchat
Product	sqlchat
Published	Sep 5, 2026
Last Updated	Sep 8, 2026

Stay Ahead of the Next One

Get instant alerts for sqlchat sqlchat

Be the first to know when new high vulnerabilities affecting sqlchat sqlchat are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

sqlchat / sqlchat

0 ≤ 665af875413affadfeefff81794f1d7758782bc2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/sqlchat/sqlchat/issues/189 github.com: https://github.com/sqlchat/sqlchat/blob/665af875413affadfeefff81794f1d7758782bc2/src/pages/api/connection/execute.ts github.com: https://github.com/sqlchat/sqlchat/blob/665af875413affadfeefff81794f1d7758782bc2/src/pages/api/connection/test.ts github.com: https://github.com/sqlchat/sqlchat vulncheck.com: https://www.vulncheck.com/advisories/sql-chat-unauthenticated-database-connection-proxy-in-the-api-connection-endpoints

Credits

🔍 George Chen