CVE-2026-97293

Summary

This flaw allows SQL injection in the Media Library Assistant version 3.41 and earlier, enabling an attacker to execute arbitrary SQL commands and potentially gain full database access.

Exploitability

Exploitation is relatively straightforward as it requires only crafting a malicious input, making it a high-risk vulnerability.

Blast radius

If exploited, the impact could be severe, including data theft, data corruption, or complete database compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.42 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.