Vulnerability · Published Jun 10, 2026 · Assigned by GitHub_M

CVE-2026-46645SQLAdmin: Authorization Bypass on `ajax_lookup`

Medium 4.3

In plain English

A medium-severity missing authorization in sqladmin from smithyhq. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 79.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in application.py bypasses the is_accessible() access control check that all other endpoints enforce. If a developer restricts model access by overriding is_accessible(), an authenticated user can still query that model's data through the ajax_lookup endpoint — silently bypassing the restriction. This issue has been patched in version 0.25.1.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	sqladmin	0.25.1	GHSA-54mc-gghv-4cfj
PyPI	sqladmin	0.25.1	PYSEC-2026-3073

Affected products (as reported)

Vendor	Product	Versions
smithyhq	sqladmin	< 0.25.1

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://github.com/smithyhq/sqladmin/security/advisories/GHSA-54mc-gghv-4cfj x_refsource_CONFIRM
https://github.com/smithyhq/sqladmin/pull/1035 x_refsource_MISC
https://github.com/smithyhq/sqladmin/commit/b0d3a19fb9b074a9ed243de46930108375dfbb98 x_refsource_MISC
https://github.com/smithyhq/sqladmin/releases/tag/0.25.1 x_refsource_MISC