SQL Injection in Chatwoot FilterService

Chatwoot versions 4.11.1 and earlier contain a critical SQL injection vulnerability in the FilterService, identified as CVE-2026-44706. The vulnerability resides in the FilterService#lt_gt_filter_values method, which fails to properly parameterize values within the is_greater_than operator used during conversation filtering. An authenticated attacker, such as a malicious or compromised agent, can send specially crafted requests to the /api/v1/accounts/{account_id}/conversations/filter endpoint to execute arbitrary SQL commands against the underlying PostgreSQL database. This allows for the exfiltration of sensitive information, including user credentials and API tokens. The availability of public proof-of-concept exploit code increases the risk of successful exploitation in enterprise environments.

Attack Chain

1. Attacker obtains valid authentication credentials for a low-privileged agent account in the target Chatwoot instance.
2. Attacker interacts with the /api/v1/accounts/{account_id}/conversations/filter API endpoint.
3. Attacker injects malicious SQL payloads into the request body, specifically targeting the is_greater_than operator parameters.
4. The vulnerable FilterService component processes the unparameterized input, executing the malicious SQL query on the PostgreSQL database.
5. Attacker employs boolean-based or time-based blind SQL injection techniques to infer database structure and content.
6. Attacker exfiltrates sensitive rows, specifically targeting user account tables, credentials, and API tokens.
7. Final objective is achieved: unauthorized access to administrative credentials and internal platform data.

Impact

Successful exploitation of this vulnerability allows an authenticated agent to bypass standard authorization controls and dump the entire PostgreSQL database. This results in the exposure of highly sensitive data, including customer PII, internal communication logs, and administrative API tokens, which could be leveraged for lateral movement or full platform takeover.

Recommendation

1. Upgrade all Chatwoot instances to a version later than 4.11.1 immediately.
2. Implement strict monitoring on the /api/v1/accounts/{account_id}/conversations/filter endpoint for anomalous HTTP request bodies containing SQL syntax characters (e.g., ', --, UNION, SELECT).
3. Review access logs for excessive or unusual activity originating from low-privileged agent accounts.
4. Perform a security audit of current agent permissions to ensure the principle of least privilege is enforced within the Chatwoot dashboard.