SQLBot (Text-to-SQL/RAG system) — SQL injection via Excel datasource table-name configuration

SQLBot's Excel-datasource ingestion path fails to safely quote a user-supplied table name before incorporating it into generated SQL, creating a SQL injection vector.

SQLBot's core function is translating natural language to SQL via an LLM/RAG pipeline; injection at the datasource-configuration layer could let an authenticated attacker manipulate or exfiltrate data beyond their intended scope through the AI query interface.

An authenticated user supplies a crafted sheet['tableName'] value in Excel datasource configuration submitted via POST /api/v1/datasource/, and SQLBot stores that value without safe identifier quoting, later using it unsafely in generated SQL.

SQLBot < 1.9.0

Upgrade to SQLBot 1.9.0 or later.