HOME VULNERABILITIESCVE-2025-15597

MEDIUM

CVE-2025-15597

CWE-266Published: March 2, 2026· Updated: Mar 5, 2026

6.3

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.0th

Official Description

A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps/system/api/assistant.py of the component API Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.0 mitigates this issue. The name of the patch is d640ac31d1ce64ce90e06cf7081163915c9fc28c. Upgrading the affected component is recommended. Multiple endpoints are affected. The vendor was contacted early about this disclosure.

Technical Analysis

CVE-2025-15597 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected Vendors & Products

fit2cloud1 product

sqlbot

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://github.com/dataease/SQLBot/commit/d640ac31d1ce64ce90e06cf7081163915c9fc28c

ADVISORYhttps://github.com/dataease/SQLBot/security/advisories/GHSA-h4xm-3q3p-5g6r

ADVISORYhttps://github.com/yaowenxiao721/Poc/blob/main/SQLBot/SQLBot-AIModel-Management-Missing-Authorization.md

ADVISORYhttps://github.com/yaowenxiao721/Poc/blob/main/SQLBot/SQLBot-User-Management-Broken-Access-Control.md

ADVISORYhttps://vuldb.com/?id.348291

ADVISORYhttps://vuldb.com/?submit.706144

ADVISORYhttps://vuldb.com/?submit.707283

ADVISORYhttps://vuldb.com/?submit.707284

ADVISORYhttps://vuldb.com/?submit.707285

ADVISORYhttps://vuldb.com/?submit.707286

ADVISORYhttps://vuldb.com/?submit.707288

ADVISORYhttps://vuldb.com/?submit.707293

ADVISORYhttps://vuldb.com/?submit.707294

ADVISORYhttps://vuldb.com/?submit.707295

All References (17)

→

https://github.com/dataease/SQLBot/Product

→

https://github.com/dataease/SQLBot/commit/d640ac31d1ce64ce90e06cf7081163915c9fc28cPatch

→

https://github.com/dataease/SQLBot/releases/tag/v1.5.0Release Notes

→

https://github.com/dataease/SQLBot/security/advisories/GHSA-h4xm-3q3p-5g6rExploit · Vendor Advisory

→

https://github.com/yaowenxiao721/Poc/blob/main/SQLBot/SQLBot-AIModel-Management-Missing-Authorization.mdExploit · Third Party Advisory

→

https://github.com/yaowenxiao721/Poc/blob/main/SQLBot/SQLBot-User-Management-Broken-Access-Control.mdExploit · Third Party Advisory

→

https://vuldb.com/?ctiid.348291Permissions Required · VDB Entry

→

https://vuldb.com/?id.348291Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.706144Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707283Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707284Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707285Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707286Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707288Third Party Advisory · VDB Entry

→

https://vuldb.com/?submit.707293Third Party Advisory · VDB Entry

Quick Facts

CVE IDCVE-2025-15597

CVSS Score6.3 / 10

SeverityMEDIUM

WeaknessCWE-266

CISA KEVNo

EPSS (30d)0.02%

Affected1 vendor

PublishedMar 2, 2026

Related CVEs (CWE-266)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2025-15597 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2025-15597·NVD