R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation, enabling arbitrary DDL and DML execution through semicolon-separated statements under the PostgreSQL superuser account.

R2R through version 3.6.6 contains a critical stacked SQL injection vulnerability in its vector index creation endpoint. Unauthenticated attackers can manipulate the index name parameter to execute arbitrary SQL statements. The vulnerability exists because the index name is directly interpolated into a CREATE INDEX statement via string formatting without identifier quoting or allowlist validation. This allows execution of arbitrary DDL and DML statements through semicolon-separated SQL injections. The operations execute under the PostgreSQL superuser account, granting maximum database privileges to an attacker. No authentication is required to exploit this vulnerability, significantly increasing its risk. The issue has been reported via GitHub and documented by VulnCheck.