A flaw in OpenChatBI’s generate_sql.py, specifically the _validate_sql_safety routine, permits remote attackers to inject arbitrary SQL statements. The vulnerability can allow unauthorized data exfiltration, modification, or deletion, compromising the confidentiality, integrity, and availability of the underlying database. The issue is a classic SQL injection (CWE‑74, CWE‑89).

Vendor zhongyu09’s OpenChatBI product is affected. All releases from version 0.2.0 through 1.0.0b1 contain the vulnerable validator; earlier 0.2.x builds had no safety checks at all, while the 0.3.0 and 1.0.0b1 releases implement an incomplete validator that still permits injection. No later versions are listed as fixed.

The CVSS score of 5.3 denotes a medium severity, and the EPSS score is not available, indicating no current data on exploitation likelihood. OpenChatBI is not listed in the CISA KEV catalog. The vulnerability is exploitable remotely by sending crafted input to the generate_sql endpoint, potentially enabling a malicious actor to execute arbitrary SQL commands against the database behind the application. The attack requires network reachability to the OpenChatBI instance and access to the endpoint that triggers _validate_sql_safety.