Critical unauthenticated SQL Injection flaw reported in on-premise Zoho Analytics Plus
Take action: If you have Zoho Analytics Plus on-premise (builds below 6170), time for a very quick update. There's an SQL injection flaw that enables full system compromise, so don't delay. Upgrade to Build 6171 and check your logs for suspicious SQL queries and unauthorized account changes.
Learn More
Zoho is reporting an SQL injection flaw in its Analytics Plus on-premise software that enables attackers to execute arbitrary SQL queries without authentication.
The vulnerability is tracked as CVE-2025-8324 (CVSS score 9.8) and is by insufficient input validation in Analytics Plus on-premise builds before 6170. Attackers can access sensitive user data stored in Analytics Plus databases, including credentials, personal information, and business intelligence or take over accounts.
Affected versions are Analytics Plus on-premise builds below 6170.
The flaw is patched in Analytics Plus on-premise Build 6171.
Organizations running Analytics Plus on-premise should immediately upgrade to the latest build and should audit their systems for signs of potential exploitation before applying patches. Security teams should look for suspicious SQL query patterns, examine user account creation and modification records for unauthorized changes, and investigate any unusual administrative actions.
