High severity · published Mar 20, 2026
CVE-2026-4504
eosphoros-ai db-gpt Incomplete Fix editor sql injection
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. This vulnerability affects unknown code of the file /api/v1/editor/ of the component Incomplete Fix. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
db-gpt · eosphoros-ai
0.7.0; 0.7.1; 0.7.2; 0.7.3; 0.7.4; 0.7.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4504
huntr.com
https://huntr.com/bounties/e32fda74-ca83-431c-8de8-08274ba686c9
vuldb.com
https://vuldb.com/?ctiid.352070
vuldb.com
https://vuldb.com/?id.352070
vuldb.com
https://vuldb.com/?submit.773891
More from db-gpt
9.8
CVE-2026-77933
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
9.8
CVE-2026-77932
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
9.8
CVE-2026-80104
DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
9.8
CVE-2026-73034
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
7.5
CVE-2025-6772
eosphoros-ai db-gpt import import_flow path traversal