What happened
SQLBot's Excel-parsing upload endpoint trusts the client-supplied filename when determining storage path, permitting file writes outside the intended upload directory.
Why it matters
Path traversal in a file-upload flow feeding an LLM/RAG data pipeline could allow overwriting application files or planting malicious content the AI system later processes.
Attack vector
The POST /api/v1/datasource/parseExcel endpoint uses attacker-controlled multipart filename data to decide where uploaded content is stored, allowing path traversal in the storage location.
Affected systems
SQLBot < 1.9.0
Mitigation
Upgrade to SQLBot 1.9.0 or later.