DB
Product
db-gpt
8
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 4High 3Medium 1Low 0
Watch
Add db-gpt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77933 | 9.8 | Oct 20 | DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment Affected: through 0.8.2 |
| CVE-2026-77932 | 9.8 | Oct 20 | DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent Affected: through 0.8.2 |
| CVE-2026-80104 | 9.8 | Aug 25 | DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename Affected: 0.8.0 before 0.8.1 |
| CVE-2026-73034 | 9.8 | Aug 11 | DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header Affected: through 0.8.1 |
Showing 4