PT-2026-29872 · Elastic+1 · Elasticsearch+1

Din4 · Published 2026-04-02 · Updated 2026-04-03 · CVE-2026-5417

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dataease SQLbot versions up to 1.6.0

Description A server-side request forgery exists in the Elasticsearch Handler component, specifically within the get es data by http function of the backend/apps/db/es engine.py file. Manipulation of the address argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly disclosed.

Recommendations Upgrade to version 1.7.0 to address this issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-5417

Affected Products

Dataease Sqlbot

Elasticsearch

References · 7

• 🔥 https://notion.so/SQLbot-SSRF-in-Elasticsearch-Unvalidated-Requests-2afea92a3c4180bea524f1a253f8d9a0 · Exploit
• https://github.com/dataease/SQLBot/releases/tag/v1.7.0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-5417 · Security Note
• https://twitter.com/CVEnew/status/2040128800218869927 · Twitter Post
• https://vuldb.com/vuln/354854 · Note
• https://vuldb.com/vuln/354854/cti · Note
• https://vuldb.com/submit/756043 · Note