CVE-2026-51869: n/a
DB-GPT version 0.8.0 has a vulnerability in its sandbox API where it silently falls back to LocalRuntime and executes code on the host system.
AI Analysis
Technical Summary
The vulnerability identified as CVE-2026-51869 affects DB-GPT v0.8.0. The sandbox API, intended to isolate code execution, silently falls back to LocalRuntime, resulting in code being executed directly on the host machine instead of within a sandboxed environment. This behavior can lead to unintended code execution on the host system.
Potential Impact
This vulnerability allows code to be executed on the host system without proper sandbox isolation, potentially leading to unauthorized code execution. The exact impact depends on the privileges of the executed code and the environment but could allow attackers to run arbitrary code on the host.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-51869: n/a
Description
DB-GPT version 0.8.0 has a vulnerability in its sandbox API where it silently falls back to LocalRuntime and executes code on the host system.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability identified as CVE-2026-51869 affects DB-GPT v0.8.0. The sandbox API, intended to isolate code execution, silently falls back to LocalRuntime, resulting in code being executed directly on the host machine instead of within a sandboxed environment. This behavior can lead to unintended code execution on the host system.
Potential Impact
This vulnerability allows code to be executed on the host system without proper sandbox isolation, potentially leading to unauthorized code execution. The exact impact depends on the privileges of the executed code and the environment but could allow attackers to run arbitrary code on the host.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-06-08T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6abd7cc62a4e24523d9c87ad
Added to database: 09/30/2026, 21:19:02 UTC
Last enriched: 09/30/2026, 21:33:46 UTC
Last updated: 09/30/2026, 22:29:38 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.