Skip to content
Heist/ feed
Back to feed
Critical

R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

Type: advisorySources: OSV

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-82526
Confirmed fixed CVEs
Not specified
Updated in this feed
4 Nov 2026, 02:24 UTC · Revision 1

Source evidence

R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

core-osv · Original source

Published 3 Sept 2026, 18:12 UTC

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

osv:CVE-2026-82526
Complete source record
{
  "id": "02f40667d6cd0dfd8b7f59b7ef610fa0b604387c635d499896635453799f6b8d",
  "url": "https://osv.dev/vulnerability/CVE-2026-82526",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint",
    "summary": "R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.",
    "evidence": "osv:CVE-2026-82526",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2026-82526",
      "aliases": [
        "CVE-2026-82526"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/SciPhi-AI/R2R",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "9c5a94d151f90876bd7eb860f300a8fd662dc481"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "9c5a94d151f90876bd7eb860f300a8fd662dc481"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v3.6.5",
            "v3.6.4",
            "v3.6.3",
            "v3.6.2",
            "v3.6.1",
            "v3.6.0",
            "v3.5.19",
            "v3.5.18",
            "v3.5.17",
            "v3.5.16",
            "v3.5.15",
            "v3.5.13",
            "v3.5.12",
            "v3.5.11",
            "v3.5.10",
            "v3.5.9",
            "v3.5.8",
            "v3.5.7",
            "v3.5.6",
            "v3.5.3",
            "v3.5.2",
            "v3.5.1",
            "v3.5.0",
            "v3.4.6",
            "v3.4.5",
            "v3.4.4",
            "v3.4.3",
            "v3.4.2",
            "v3.4.0",
            "v3.3.30",
            "v3.3.29",
            "v3.3.28",
            "3.3.27",
            "v3.3.0",
            "v3.2.30",
            "v3.2.0",
            "V3.1.0",
            "v0.3.0",
            "v3.0.0",
            "v0.2.85",
            "v2.0.84",
            "v2.0.83",
            "v0.2.76",
            "v0.2.74",
            "v0.2.73",
            "v2.0.64",
            "v0.2.61",
            "v0.2.60",
            "v0.2.59",
            "v0.2.58",
            "v0.2.51",
            "v0.2.47",
            "v0.2.39",
            "v2.0.38",
            "v2.0.3",
            "v2.0.18",
            "v0.2.17",
            "v0.2.16",
            "v0.2.15",
            "v0.2.12",
            "v0.2.11",
            "v0.2.10",
            "v0.2.04",
            "v0.2.00",
            "v0.2.03",
            "v0.2.02",
            "v0.2.01",
            "v0.1.35",
            "v0.1.34",
            "v0.1.33",
            "v0.1.32",
            "v0.1.31",
            "v0.1.30",
            "v0.1.29",
            "v0.1.28",
            "v0.1.27",
            "v0.1.26",
            "v0.1.24",
            "v0.1.23",
            "v0.1.22",
            "v0.1.21",
            "v0.1.2",
            "v0.1.1",
            "v0.0.1",
            "v0.0.01"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82526.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:32.365081438Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82526.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-82526",
        "https://www.vulncheck.com/advisories/r2r-sql-injection-via-vector-index-creation-endpoint",
        "https://github.com/SciPhi-AI/R2R",
        "https://github.com/SciPhi-AI/R2R/issues/2309"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-89"
        ],
        "cna_assigner": "VulnCheck",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "last_affected": "3.6.6"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "StandardRange"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82526.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-82526",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 499583,
  "published_at": "2026-09-03T18:12:48.982+00:00"
}