SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can exploit these endpoints without any authentication to connect to internal databases, execute arbitrary SQL commands, enumerate database schemas, and pivot into the server's internal network. The vulnerability affects the API connection endpoints including execute.ts and test.ts. This represents a critical security flaw as it allows complete database access and potential network pivoting with no authentication barrier. The issue has been documented in GitHub issues and confirmed by VulnCheck in their advisories.
