A high-severity SQL injection vulnerability in the Koha guided report builder allows authenticated attackers to compromise the underlying database.

This vulnerability is a SQL injection (CWE-89) within the guided report builder component, which allows a user with low-level privileges to manipulate database queries.

Successful exploitation allows an attacker to bypass security controls, leading to unauthorized data exfiltration, modification, or complete database destruction. Given the CVSS score of 8.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of sensitive library management data.

Immediate Action: Upgrade to a version of Koha beyond 26.05.01-1 to resolve the underlying SQL injection flaw.

Proactive Monitoring: Review application access logs for unusual patterns in the guided reports module and monitor database query logs for suspicious syntax or unexpected execution times.

Compensating Controls: Implement strict input validation or use a Web Application Firewall (WAF) to detect and block common SQL injection payloads targeting report parameters.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability necessitates immediate attention to prevent database-level compromise. Administrators should prioritize updating the Koha installation to the latest patched release to neutralize this injection risk.