Products: 1
Vulnerabilities: 17
Known Exploited: 0
10
Critical Level Threats
5
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-77933
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
Last Modified: Oct 20, 2026
Published: Oct 20, 2026
CVE-2026-77932
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
Last Modified: Oct 20, 2026
Published: Oct 20, 2026
CVE-2026-80104
DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
Last Modified: Aug 28, 2026
Published: Aug 25, 2026
CVE-2026-73034
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
Last Modified: Aug 14, 2026
Published: Aug 11, 2026
CVE-2025-51458
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.
Last Modified: Sep 11, 2025
Published: Jul 22, 2025
Items Per Page
