CVE Tools
Track your stack

Db-gpt

20 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Db-gpt, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Db-gpt CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Db-gpt CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-0310
2025-040
2025-050
2025-061
2025-072
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-033
2026-040
2026-050
2026-060
2026-070
2026-082
2026-090
2026-102

Severity

How the 20 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1050%
  • High735%
  • Medium315%

Latest CVEs

The 15 most recently published vulnerabilities affecting Db-gpt.

  1. CVE-2026-77933DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment9.8
  2. CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent9.8
  3. CVE-2026-80104DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename9.8
  4. CVE-2026-73034DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header9.8
  5. CVE-2026-4505eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload6.3
  6. CVE-2026-4504eosphoros-ai db-gpt Incomplete Fix editor sql injection7.3
  7. CVE-2026-3409eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection7.3
  8. CVE-2025-51459File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/...6.5
  9. CVE-2025-51458SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/edito...6.5
  10. CVE-2025-6772eosphoros-ai db-gpt import import_flow path traversal7.3
  11. CVE-2024-10830Path Traversal in eosphoros-ai/db-gpt8.2
  12. CVE-2024-10834Arbitrary File Write in eosphoros-ai/db-gpt9.1
  13. CVE-2024-10833Arbitrary File Write in eosphoros-ai/db-gpt9.1
  14. CVE-2024-10906Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt8.1
  15. CVE-2024-10829Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt7.5

Product grouping is registry-driven, with AI assist and human review. How it works