{"id":"CVE-2026-129127","aliases":[],"cve":{"records":[{"id":"CVE-2026-129127","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-13T16:01:02.227Z","published":"2026-11-13T16:23:41.139Z","modified":"2026-11-13T21:11:02.627Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-13T16:23:41.139Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T21:11:02.627Z"}],"references":[{"url":"https://github.com/dataease/SQLBot/issues/1432","tags":["issue-tracking"],"source":"VulnCheck"},{"url":"https://github.com/dataease/SQLBot","tags":["product"],"source":"VulnCheck"},{"url":"https://github.com/dataease/SQLBot/commit/8b4097f216d0d57e7c82f12ef6b36add1f64e49e","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/dataease/SQLBot/pull/1466","tags":["issue-tracking","patch"],"source":"VulnCheck"},{"url":"https://github.com/dataease/SQLBot/blob/96f06c7eade60ecf3e6af0313821373761d1fb85/backend/common/core/security.py#L32-L35","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/sqlbot-through-1.10.3-weak-password-hashing-via-unsalted-md5","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-916","description":"Use of Password Hash With Insufficient Computational Effort","source":"VulnCheck"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T21:10:53.764446Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"SQLBot through 1.10.3 Weak Password Hashing via Unsalted MD5","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"SQLBot through 1.10.3 contains a weak password hashing vulnerability that stores local account passwords in sys_user.password as unsalted MD5 digests via md5pwd() in security.py. Attackers who obtain the user table can recover passwords, including administrator passwords, using precomputed tables or GPU cracking, since identical passwords produce identical hashes.","score":5.9,"severity":"medium","published":"2026-11-13T16:23:41.139Z","modified":"2026-11-13T21:11:02.627Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"dataease","name":"SQLBot","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.10.3","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:github/dataease/SQLBot","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-129127"}],"remediation":[],"references":["https://github.com/dataease/SQLBot/issues/1432","https://github.com/dataease/SQLBot","https://github.com/dataease/SQLBot/commit/8b4097f216d0d57e7c82f12ef6b36add1f64e49e","https://github.com/dataease/SQLBot/pull/1466","https://github.com/dataease/SQLBot/blob/96f06c7eade60ecf3e6af0313821373761d1fb85/backend/common/core/security.py#L32-L35","https://www.vulncheck.com/advisories/sqlbot-through-1.10.3-weak-password-hashing-via-unsalted-md5"],"sources":[{"name":"CVE","id":"CVE-2026-129127","modified":"2026-11-13T21:11:02.627Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-129127"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":5.9},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","score":4.4}],"sourceAffected":[],"observedAt":"2026-11-13T21:42:10.835Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:30:32.029Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T22:10:34.098Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T22:10:35.680Z","attemptedAt":"2026-11-13T22:10:35.680Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T22:10:36.708Z","attemptedAt":"2026-11-13T22:10:36.708Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T22:10:36.256Z","attemptedAt":"2026-11-13T22:10:36.256Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-p33h-chx9-f9hf","url":"https://github.com/advisories/GHSA-p33h-chx9-f9hf","modified":"2026-11-13T18:32:32Z","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-13T22:10:35.680Z"},{"source":"ENISA EUVD","id":"EUVD-2026-125552","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125552","modified":"Nov 13, 2026, 9:11:02 PM","score":5.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-13T22:10:36.708Z"}],"aiSummary":{"text":"SQLBot through 1.10.3 stores passwords as unsalted MD5 digests, allowing attackers with access to the user table to recover passwords using precomputed tables or GPU cracking. This weakness affects local account passwords, including administrator passwords. Attackers can exploit this due to the use of insufficient computational effort in password hashing.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T21:51:08.987Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-129127"}]}}