PT-2026-137434
CVE-2026-123018
·
Published
2026-11-05
·
Updated
2026-11-05
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the function execute code of the file code utils.py of the component CodeAction. Performing a manipulation results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾