CVE-2026-5417
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Dataease SQLbot up to version 1.6.0 has a vulnerability in the function get_es_data_by_http in file backend/apps/db/es_engine.py of the Elasticsearch Handler component, allowing manipulation of the address argument leading to server-side request forgery (SSRF). The attack can be performed remotely. A fix is available in version 1.7.0.
Risk Assessment
An attacker can use the server to make unauthorized requests to internal network resources, potentially leading to privilege escalation or data leakage.
Recommendation
Immediately update to version 1.7.0, which fixes this vulnerability.
Original NVD description (English source)
A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of the file backend/apps/db/es_engine.py of the component Elasticsearch Handler. This manipulation of the argument address causes server-side request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.7.0 is capable of addressing this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.