Db-gpt

This hub aggregates every CVE we track for Db-gpt, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Db-gpt.

• CVE-2026-73034DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header9.8Aug 11, 2026
• CVE-2026-4505eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload6.3Mar 20, 2026
• CVE-2026-4504eosphoros-ai db-gpt Incomplete Fix editor sql injection7.3Mar 20, 2026
• CVE-2026-3409eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection7.3Mar 2, 2026
• CVE-2025-51458SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/edito...6.5Jul 22, 2025
• CVE-2025-51459File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/...6.5Jul 22, 2025
• CVE-2025-6772eosphoros-ai db-gpt import import_flow path traversal7.3Jun 27, 2025
• CVE-2024-10830Path Traversal in eosphoros-ai/db-gpt8.2Mar 20, 2025
• CVE-2024-10834Arbitrary File Write in eosphoros-ai/db-gpt9.1Mar 20, 2025
• CVE-2024-10833Arbitrary File Write in eosphoros-ai/db-gpt9.1Mar 20, 2025
• CVE-2024-10906Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt8.1Mar 20, 2025
• CVE-2024-10829Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt7.5Mar 20, 2025
• CVE-2024-10901Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt9.8Mar 20, 2025
• CVE-2024-10835Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt9.8Mar 20, 2025
• CVE-2024-10902Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt9.8Mar 20, 2025