CVE-2026-34100: Guardian Language-System Unauthenticated SQL Injection via id Parameter in media.php

Synopsis

Unauthenticated SQL injection in Guardian language-system allows a remote attacker to query the database without any credentials. The vulnerability is reachable over the network with no authentication required, as the id GET parameter in media.php is passed directly into a SQL query without sanitization. Successful exploitation gives the attacker full read and write access to the database, and can also disrupt service availability. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable media.php endpoint is exposed over the network, so an attacker must be able to reach the service via HTTP to send a crafted id parameter.

• AuthenticationNot required

  No credentials of any kind are needed; the vulnerable GET parameter is processed before any authentication check, making the attack fully anonymous. Note: the description mentions an authenticated attacker, but the CVSS vector records PR:N indicating no privileges are required.

• Victim interactionNot required

  The attacker sends a direct HTTP request to the endpoint and no user action or interaction is involved.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special conditions, race windows, or environmental factors to succeed.

Blast Radius

• Reads all data stored in the database, including file metadata, owner identifiers, and any other tables reachable via the injected query.
• Modifies or deletes persisted database rows, allowing an attacker to corrupt records or escalate access by altering stored credentials or permissions.
• Crashes or destabilizes the database service through destructive SQL statements, causing availability loss for the application.
• Extracts credentials or session data stored in the database, enabling further lateral movement within the application or connected systems.