SQL Chat exposes four unauthenticated API endpoints that accept user‑supplied database connection parameters. An attacker can invoke these endpoints to open arbitrary database connections and run arbitrary SQL queries, enumerate schemas, and pivot into internal network resources without authentication. The description explicitly states attackers can execute SQL commands; however, it is inferred that full compromise of the database’s confidentiality, integrity, and availability is possible through such arbitrary query execution. This flaw aligns with the weakness identified as CWE‑918.

The vulnerability affects the SQL Chat application, as listed by the CNA. Specific version information is not supplied, so all published releases of SQL Chat are presumed vulnerable unless otherwise noted by the vendor.

The CVSS score of 9.4 indicates critical severity. No EPSS data is available, and the flaw is not yet in the CISA KEV catalog. The endpoint itself is reachable over the network and does not require prior authentication, making exploitation technically straightforward for any host that can reach the API. Based on the description, it is inferred that an attacker could not only retrieve stored data but also alter it, leading to potential integrity compromise and the ability to execute further lateral movement across the network.