Critical severity · published Jul 20, 2025
CVE-2025-7894
A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generate_simple_sql of the file backend/onyx/agents/agent_search/kb_search/nodes/a3_generate_simple_sql.py of the component Chat Interface. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Onyx · Onyx
through 0.29.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7894
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7894
Permissions Required
https://vuldb.com/?ctiid.317009
Third Party Advisory
https://vuldb.com/?id.317009
Third Party Advisory
https://vuldb.com/?submit.615322
Exploit
https://www.cnblogs.com/aibot/p/18982747
More from Onyx
8.1
CVE-2024-7767
An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94
6.5
CVE-2026-42277
Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files
6.5
CVE-2024-9612
In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page
5.4
CVE-2025-51479
Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH…
4.3
CVE-2026-42276
Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions