Skip to contentEosphoros-ai Db-gpt vulnerabilities
- eosphoros-ai db-gpteosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engineCVE-2026-1230205.3 Medium
- eosphoros-ai db-gpteosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphereCVE-2026-1230196.9 Medium
- eosphoros-ai db-gpteosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injectionCVE-2026-1230186.9 Medium
- eosphoros-ai db-gptDB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose DeploymentCVE-2026-779339.3 Critical
- eosphoros-ai db-gptDB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agentCVE-2026-779329.3 Critical
- eosphoros-ai db-gptDB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameCVE-2026-801049.3 Critical
- eosphoros-ai db-gptDB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id HeaderCVE-2026-73034Public exploit9.3 Critical
- eosphoros-ai db-gpteosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted uploadCVE-2026-45055.3 Medium
- eosphoros-ai db-gpteosphoros-ai db-gpt Incomplete Fix editor sql injectionCVE-2026-45046.9 Medium
- eosphoros-ai db-gpteosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injectionCVE-2026-34096.9 Medium
- dbgpt db-gpteosphoros-ai db-gpt import import_flow path traversalCVE-2025-67726.9 Medium
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 morePath Traversal in eosphoros-ai/db-gptCVE-2024-108308.2 High
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write in eosphoros-ai/db-gptCVE-2024-108349.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write in eosphoros-ai/db-gptCVE-2024-10833Fix available9.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreCross-Site Request Forgery (CSRF) in eosphoros-ai/db-gptCVE-2024-109067.1 High
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreDenial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptCVE-2024-10829Public exploit7.5 High
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gptCVE-2024-109019.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write via SQL Injection in eosphoros-ai/db-gptCVE-2024-10835Fix available9.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Upload with Path Traversal in eosphoros-ai/db-gptCVE-2024-109029.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptCVE-2024-108319.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Deletion in eosphoros-ai/DB-GPTCVE-2025-04528.2 High