Onyx vulnerabilities
We track 2 vulnerabilities in Onyx products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Onyx vulnerabilities
- 9.8 Critical severity
Onyx: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generate_simple_sql of the file backend/onyx/agents/agent_search/kb_search/nodes/a3_generate_simple_sql.py of the component Chat Interface.
- 8.1 High severity
danswer-ai/danswer: Missing Authorization
An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system to view, modify, and delete chats created by an Admin. This can lead to unauthorized access to sensitive infor