CVE-2026-4173
Description
A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Multiple authenticated SQL injection vulnerabilities in Chat2DB ≤0.3.7 allow attackers to extract arbitrary metadata from DM databases via unsanitized parameters.
Root
Cause
The vulnerability is located in DMDBManage.java, where user-supplied parameters like schemaName and tableName are directly concatenated into SQL query templates using String.format(). The application fails to use parameterized queries or input validation, leading to SQL injection in functions such as exportTable, exportView, and exportProcedure [1].
Exploitation
An authenticated attacker can send crafted requests to the /api/rdb/database/export endpoint, injecting malicious SQL clauses into the schemaName or tableName parameters. The attack is remotely exploitable and does not require special privileges beyond authentication [1].
Impact
Successful exploitation allows an attacker to bypass schema isolation and read table structures, metadata, and sensitive data from other schemas on the same DM database instance. The exploit has been published, increasing the risk of active attacks [1].
Mitigation
The vendor was contacted but did not respond. As of the affected version ≤0.3.7, no official patch or workaround has been released. Users are advised to restrict access to the export endpoints and apply network-level controls until a fix is available [1].
AI Insight generated on May 18, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1- Range: <=0.3.7
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.