Threat database

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access including FILE and SUPER privileges.

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow.

CVE-2026-51864 is a critical directory traversal vulnerability in DB-GPT versions 0.7.5 and 0.8.0. It exists in the python_file_upload functionality, allowing a remote attacker to write files outside the intended workspace or storage boundary. This can lead to unauthorized file creation and potential compromise of the system.

DB-GPT version 0.8.0 contains a directory traversal vulnerability in the skill_upload functionality. This flaw allows a remote attacker to write files outside the intended workspace or storage boundary, potentially leading to unauthorized file manipulation. The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.

CVE-2026-80104 is a critical path traversal vulnerability in eosphoros-ai's DB-GPT version 0.8.0. The application improperly constructs the destination path for uploaded files without restricting them to the intended upload directory. This allows an unauthenticated remote attacker to write files outside the upload directory, including placing or replacing Python modules within the application package, leading to remote code execution.

SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.

File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with plugin_hub._sanitize_filename and plugins_util.scan_plugins.

A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and complete denial of service for all users. This vulnerability affects all endpoints processing multipart/form-data requests.