Vendor

    Eosphoros-ai

    18 known vulnerabilities in products by Eosphoros-ai, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eosphoros-ai
    CriticalCVE-2026-73034

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    		9.8
    CriticalCVE-2026-80104

    DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

    		9.8
    CriticalCVE-2026-77932

    DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

    		9.8
    CriticalCVE-2024-10902

    Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    CriticalCVE-2026-77933

    DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

    		9.8
    CriticalCVE-2024-10835

    Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    CriticalCVE-2024-10901

    Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    CriticalCVE-2024-10833

    Arbitrary File Write in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    CriticalCVE-2024-10831

    Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    CriticalCVE-2024-10834

    Arbitrary File Write in eosphoros-ai/db-gpt

    also in 1 other product

    		9.1
    HighCVE-2024-10830

    Path Traversal in eosphoros-ai/db-gpt

    also in 1 other product

    		8.2
    HighCVE-2024-10829

    Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt

    also in 1 other product

    		7.5
    HighCVE-2025-6772

    eosphoros-ai db-gpt import import_flow path traversal

    also in 1 other product

    		7.3
    HighCVE-2025-0452

    Arbitrary File Deletion in eosphoros-ai/DB-GPT

    also in 1 other product

    		8.2
    HighCVE-2026-3409

    DB-GPT: Code Injection

    		7.3
    HighCVE-2026-4504

    eosphoros-ai db-gpt Incomplete Fix editor sql injection

    		7.3
    MediumCVE-2026-4505

    eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload

    		6.3
    HighCVE-2024-10906

    Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt

    also in 1 other product

    		7.1

    News

    Products

    Products by Eosphoros-ai
    Eosphoros-ai/db-gpt100
    DB-GPT80