PT-2026-137434
CVE-2026-123018
·
Publicado
2026-11-05
·
Atualizado
2026-11-05
Descrição por
CVSS 3.1
8.3
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the function execute code of the file code utils.py of the component CodeAction. Performing a manipulation results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾