Dbgpt

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 15
    Known Exploited: 0
    8
    Critical Level Threats
    5
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-80104

    DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

    Last Modified: Aug 28, 2026
    Published: Aug 25, 2026

    CVE-2026-73034

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    Last Modified: Aug 14, 2026
    Published: Aug 11, 2026

    CVE-2025-51458

    SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.

    Last Modified: Sep 11, 2025
    Published: Jul 22, 2025

    CVE-2025-51459

    File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with plugin_hub._sanitize_filename and plugins_util.scan_plugins.

    Last Modified: Sep 11, 2025
    Published: Jul 22, 2025

    CVE-2025-6772

    eosphoros-ai db-gpt import import_flow path traversal

    Last Modified: Sep 15, 2025
    Published: Jun 27, 2025
    Items Per Page
    Dbgpt Vulnerabilities & Security CVEs | CVE-DB