Dashboard / CVE-2026-82527

CVE-2026-82527

HIGH
MEDIUM Priority: 0.04 BB Relevance: 77/100
Published: 2026-09-03 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
AT: None
VC: High
VI: None
VA: None

Description

R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoint. Attackers can exploit the direct interpolation of filter keys into the SQL WHERE clause without parameterization or escaping to perform time-based and boolean-based data exfiltration from the application database.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
SciPhi-AI R2R 0
SciPhi-AI R2R 0

References & Advisories (2)

https://github.com/SciPhi-AI/R2R/issues/2308
technical-description exploit issue-tracking

Bug Bounty Relevance

77 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.7 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.46%
Raw Score 0.004630
Percentile 40.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00463
2026-11-12
0.00463
2026-11-10
0.00463
2026-11-09
0.00463
2026-11-08
0.00463

Intelligence Sources

mitre ref →

External Links