Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck

CVE-2026-82526R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

Critical 9.8

In plain English

A critical-severity SQL injection in R2R from SciPhi-AI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 46.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

Affected products (as reported)

Vendor	Product	Versions
SciPhi-AI	R2R	0 – through 3.6.60 – through 9c5a94d151f90876bd7eb860f300a8fd662dc481

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Researcher Disclosure technical-description, exploit
https://www.vulncheck.com/advisories/r2r-sql-injection-via-vector-index-creation-endpoint third-party-advisory