EO
Vendor
eosphoros-ai
18
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77933 | DB DB-GPT eosphoros-ai | 9.8 | Oct 20 | DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment |
| CVE-2026-77932 | DB DB-GPT eosphoros-ai | 9.8 | Oct 20 | DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent |
| CVE-2026-80104 | DB DB-GPT eosphoros-ai | 9.8 | Aug 25 | DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename |
| CVE-2026-73034 | DB DB-GPT eosphoros-ai | 9.8 | Aug 11 | DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header |
| CVE-2026-4505 | DB DB-GPT eosphoros-ai | 6.3 | Mar 20 | eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload |
| CVE-2026-4504 | DB db-gpt eosphoros-ai | 7.3 | Mar 20 | eosphoros-ai db-gpt Incomplete Fix editor sql injection |
| CVE-2026-3409 | DB db-gpt eosphoros-ai | 7.3 | Mar 2 | eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection |
| CVE-2025-6772 | DB db-gpt eosphoros-ai | 7.5 | Jun 27 | eosphoros-ai db-gpt import import_flow path traversal |
| CVE-2024-10830 | EO eosphoros-ai/db-gpt eosphoros-ai | 8.2 | Mar 20 | Path Traversal in eosphoros-ai/db-gpt |
| CVE-2024-10834 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt |
| CVE-2024-10833 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt |
| CVE-2024-10906 | EO eosphoros-ai/db-gpt eosphoros-ai | 8.1 | Mar 20 | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt |
| CVE-2024-10829 | EO eosphoros-ai/db-gpt eosphoros-ai | 7.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt |
| CVE-2024-10901 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.8 | Mar 20 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt |
| CVE-2024-10835 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.8 | Mar 20 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt |
| CVE-2024-10902 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.8 | Mar 20 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt |
| CVE-2024-10831 | EO eosphoros-ai/db-gpt eosphoros-ai | 9.1 | Mar 20 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt |
| CVE-2025-0452 | EO eosphoros-ai/db-gpt eosphoros-ai | 8.2 | Mar 20 | Arbitrary File Deletion in eosphoros-ai/DB-GPT |