CVE-2026-88402

Name of the Vulnerable Software and Affected Versions nocobase version 2.1.21

Description A SQL injection issue exists in the checkSQL() function, which allows attackers to access sensitive database information by injecting crafted SQL statements. SQL injection is a technique where malicious SQL code is inserted into input fields to manipulate a database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the checkSQL() function to minimize the risk of exploitation.