eosphoros-ai vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 202610

Newest CVEs

• CVE-2026-123020

  eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine

  eosphoros-ai · DB-GPT

  Medium5.3
• CVE-2026-123019

  eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere

  eosphoros-ai · DB-GPT

  Medium6.9
• CVE-2026-123018

  eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection

  eosphoros-ai · DB-GPT

  Medium6.9
• CVE-2026-77933

  DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

  eosphoros-ai · DB-GPT

  Critical9.3
• CVE-2026-77932

  DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

  eosphoros-ai · DB-GPT

  Critical9.3
• CVE-2026-80104

  DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

  eosphoros-ai · DB-GPT

  Critical9.3
• CVE-2026-73034

  DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

  eosphoros-ai · DB-GPT

  Critical9.3
• CVE-2026-4505

  eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload

  eosphoros-ai · DB-GPT

  Medium5.3
• CVE-2026-4504

  eosphoros-ai db-gpt Incomplete Fix editor sql injection

  eosphoros-ai · db-gpt

  Medium6.9
• CVE-2026-3409

  eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection

  eosphoros-ai · db-gpt

  Medium6.9