Is CVE-2026-86123 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86123?

CVE-2026-86123 has a CVSS v3 severity of HIGH (8.7).

Back

CVE-2026-86123

Description

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's network without authentication.