CVE-2026-82526: R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-03 · updated 2026-09-08
Weakness: CWE-89

Description

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

Affected products

SciPhi-AI R2R: through 3.6.6

References

https://github.com/SciPhi-AI/R2R/issues/2309
https://www.vulncheck.com/advisories/r2r-sql-injection-via-vector-index-creation-endpoint

Get alerted when CVE-2026-82526 or the next vulnerability affects your stack