CVE-2026-85689

llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter and lookup values are directly string-interpolated into SQL WHERE clauses without parameterization or escaping, in both the SQLite and PostgreSQL backends. The filter validator only checks keys against an allow-list and never sanitizes values. Attacker-controlled filter values reaching the public API via Library.block_lookup and Query.text_query_with_custom_filter / text_query_by_author_or_speaker can neutralize the intended filter to disclose rows the caller was scoped out of (cross-document/cross-collection disclosure); on PostgreSQL the flaw permits boolean- and UNION-based SQL injection.

• CWE-89

• https://github.com/llmware-ai/llmware
• https://github.com/llmware-ai/llmware/blob/v0.4.6/llmware/resources.py
• https://github.com/llmware-ai/llmware/issues/1304
• https://www.vulncheck.com/advisories/llmware-0.4.6-sql-injection-via-unescaped-filter-values

Published

Sep 4, 2026

Last Modified

Sep 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85682The YOP Poll plugin for WordPress is vulnerable to Origin Va…8.8
• CVE-2026-85684marker through 2.0.0 contains a path traversal vulnerability…9.1
• CVE-2026-85685AgentScope through 2.0.7.post1 contains a path traversal vul…7.5
• CVE-2026-85686ms-swift 4.5.2 contains a server-side request forgery vulner…7.5
• CVE-2026-85687surya 0.22.1 screenshot server contains an unauthenticated a…7.5
• CVE-2026-85688TEN Framework 0.11.71 contains unauthenticated arbitrary fil…9.8
• CVE-2026-8569Out of bounds write in Codecs in Google Chrome on Mac prior …8.3
• CVE-2026-85690Plandex 2.2.1 contains a path traversal vulnerability in the…7.8
• CVE-2026-85691MegaParse 0.0.55 contains an unauthenticated server-side req…7.5
• CVE-2026-85692Nightingale (n9e), as of commit 8362cbe (main branch, confir…6.5
• CVE-2026-85693Chatbot UI contains an authorization bypass vulnerability in…6.5
• CVE-2026-85694LaVague 0.2.35 contains a remote code execution vulnerabilit…8.1