CVE-2025-15598

CVE-2025-15598 is a medium-severity vulnerability affecting Dataease SQLBot up to version 1.5.1, specifically within the JWT Token Handler's validateEmbedded function. This flaw allows for improper verification of cryptographic signatures, potentially leading to unauthorized access or data manipulation. While the attack can be initiated remotely, its high complexity and difficult exploitability, coupled with a low EPSS score, suggest a limited immediate threat. Although public exploit code exists, there is currently no evidence of active exploitation, and community discussion or media coverage is minimal.