Login Request a demo
DB
Product
db-gpt
by eosphoros-ai · last CVE Oct 20, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 3Medium 1Low 0
Severity
All severities8Critical4High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add db-gpt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-77933
9.8
0%
Oct 20
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
Affected: through 0.8.2
CVE-2026-77932
9.8
1%
Oct 20
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
Affected: through 0.8.2
CVE-2026-80104
9.8
1%
Aug 25
DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
Affected: 0.8.0 before 0.8.1
CVE-2026-73034
9.8
6%
Aug 11
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
Affected: through 0.8.1
CVE-2025-6772
7.5
1%
Jun 27
eosphoros-ai db-gpt import import_flow path traversal
Affected: 0.7.0; 0.7.1; 0.7.2
CVE-2026-4504
7.3
0%
Mar 20
eosphoros-ai db-gpt Incomplete Fix editor sql injection
Affected: 0.7.0; 0.7.1; 0.7.2; 0.7.3; 0.7.4; 0.7.5
CVE-2026-3409
7.3
0%
Mar 2
eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection
Affected: 0.7.5
CVE-2026-4505
6.3
0%
Mar 20
eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload
Affected: 0.7.0; 0.7.1; 0.7.2; 0.7.3; 0.7.4; 0.7.5
Showing 8