CVE-2026-105845: Payload: SQL Injection in SQLite and Postgres

The advisory says a user can submit a request that exploits SQL injection in Payload. It does not name the vulnerable function or the exact parameter. The exposure is tied to dynamic query filters and join parameters on collections that the requester can read.

The attack needs only network access to the API and a collection that untrusted users can read. This often includes public collections such as pages or posts. The CVSS vector (network, low complexity, no privileges, no user interaction) fits this. The impact ratings are high for confidentiality, integrity and availability. With SQL injection against the application database, an attacker can read data beyond the collection they were allowed to query. That can include user records and credential hashes. They may also be able to change or delete data.

Deployments on @payloadcms/mongodb are not affected. Only the SQL adapters, SQLite and Postgres, are.

Affected: npm payload from 3.0.0 up to but not including 3.88.0, and from 4.0.0-canary.0 up to but not including 4.0.0-canary.27. You are exposed only if you use the SQLite or Postgres adapter and untrusted users can query readable collections with dynamic filters or joins.

Check your installed version:

npm ls payload

Check which database adapter you use in package.json or in the db option of payload.config.ts.

Upgrade all Payload packages to 3.88.0 or later. On the 4.x canary line, use 4.0.0-canary.27 or later.

npm install [email protected]

Keep the other @payloadcms/* packages on the same version as payload.

If you cannot upgrade yet, the advisory gives two workarounds. Stop untrusted users from supplying dynamic query filters or join parameters. Limit read access to the affected collections.

The sources give no exploit signature. Review access logs for requests to the REST or GraphQL endpoints of readable collections with unusual where or join query parameters. Look for SQL fragments, quote characters or very long values. Check database logs for syntax errors and unexpected queries from the application role. Look for unexpected reads of tables such as users. If you see suspicious activity, rotate secrets and API keys stored in the database.

Impact

A user can submit a request that exploits a SQL Injection vulnerability in Payload.

You are affected if:

• You use an affected Payload version.
• Untrusted users can query readable collections using dynamic filters or joins.

You are not affected if you use MongoDB (@payloadcms/mongodb).

Patches

Users should upgrade Payload packages to >= 3.88.0 or >= 4.0.0-canary.27.

Workarounds

Upgrading to a patched version is recommended. Until you can upgrade, restrict untrusted users from supplying dynamic query filters or join parameters and limit read access to affected collections.