Eosphoros-ai vulnerabilities
We track 19 vulnerabilities in Eosphoros-ai products across 2 products. 19 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Eosphoros-ai vulnerabilities
- 7.3 High severity
DB-GPT: Inclusion of Functionality from Untrusted Control Sphere
A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is the function exec_module of the file hf_adapter.py of the component HuggingFace Adapter. Executing a manipulation of the argument trust_remote_code can lead to inclusion of function
- 8.3 High severity
DB-GPT: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the function execute_code of the file code_utils.py of the component CodeAction. Performing a manipulation results in code injection. The attack can be initiated remotel
- 9.8 Critical severity
DB-GPT: Use of Default Credentials
DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate
- 9.8 Critical severity
DB-GPT: Missing Authentication for Critical Functionality
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send promp
- 9.8 Critical severity
DB-GPT: Improper Limitation of a Pathname to a Restricted Directory
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py takes file.filename as given and writes th
- 9.8 Critical severity
DB-GPT: Improper Limitation of a Pathname to a Restricted Directory
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoin
- 7.3 High severity
db-gpt: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. This vulnerability affects unknown code of the file /api/v1/editor/ of the component Incomplete Fix. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit h
- 7.3 High severity
db-gpt: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the file /api/v1/serve/awel/flow/import of the component Flow Import Endpoint. Performing a manipulation as part of F
- 7.5 High severity
db-gpt: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to
- 8.2 High severity
eosphoros-ai/db-gpt: External Control of File Name or Path
eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vul
- 8.1 High severity
eosphoros-ai/db-gpt: Cross-Site Request Forgery
In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by
- 9.8 Critical severity
eosphoros-ai/db-gpt: Improper Limitation of a Pathname to a Restricted Directory
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any locati
- 9.8 Critical severity
eosphoros-ai/db-gpt: Unrestricted Upload of File with Dangerous Type
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write ar
- 9.8 Critical severity
eosphoros-ai/db-gpt: Improper Neutralization of Special Elements used in an SQL Command
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write using DuckDB SQL, enabling t
- 9.1 Critical severity
eosphoros-ai/db-gpt: External Control of File Name or Path
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to `os.path.join`, enabling an attacker to write files to arbitr
- 9.1 Critical severity
eosphoros-ai/db-gpt: Absolute Path Traversal
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the tar
- 9.1 Critical severity
eosphoros-ai/db-gpt: Absolute Path Traversal
In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key
- 8.2 High severity
eosphoros-ai/db-gpt: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. This vulnerability allows an attacker to delete any file on the server by manipulating the `file_key` parameter. The `file_key` param
- 7.5 High severity
eosphoros-ai/db-gpt: Loop with Unreachable Exit Condition
A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to t