What’s Vulnerable › Products
eosphoros-ai/db-gpt vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your eosphoros-ai/db-gpt version is affected
Latest eosphoros-ai/db-gpt vulnerabilities
- CVE-2026-77933 — DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment (CVSS 9.8)
- CVE-2026-77932 — DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent (CVSS 9.8)
- CVE-2026-80104 — DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename (CVSS 9.8)
- CVE-2026-73034 — DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header (CVSS 9.8)
- CVE-2026-4505 — eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload (CVSS 6.3)
- CVE-2026-4504 — eosphoros-ai db-gpt Incomplete Fix editor sql injection (CVSS 7.3)
- CVE-2026-3409 — eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection (CVSS 7.3)
- CVE-2025-51458 — (CVSS 6.5)
- CVE-2025-51459 — (CVSS 6.5)
- CVE-2025-6772 — eosphoros-ai db-gpt import import_flow path traversal (CVSS 7.5)
- CVE-2025-0452 — Arbitrary File Deletion in eosphoros-ai/DB-GPT (CVSS 8.2)
- CVE-2024-10906 — Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt (CVSS 8.1)
- CVE-2024-10902 — Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt (CVSS 9.8)
- CVE-2024-10901 — Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt (CVSS 9.8)
- CVE-2024-10835 — Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt (CVSS 9.8)
- CVE-2024-10834 — Arbitrary File Write in eosphoros-ai/db-gpt (CVSS 9.1)
- CVE-2024-10833 — Arbitrary File Write in eosphoros-ai/db-gpt (CVSS 9.1)
- CVE-2024-10831 — Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt (CVSS 9.1)
- CVE-2024-10830 — Path Traversal in eosphoros-ai/db-gpt (CVSS 8.2)
- CVE-2024-10829 — Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt (CVSS 7.5)