<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: eosphoros-ai-db-gpt</title><description>Every new CVE for eosphoros-ai-db-gpt.</description><link>https://agentprime.io/</link><item><title>CVE-2026-123020: eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine</title><link>https://agentprime.io/advisories/CVE-2026-123020/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-123020/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 12:45:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-123019: eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere</title><link>https://agentprime.io/advisories/CVE-2026-123019/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-123019/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 12:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-123018: eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection</title><link>https://agentprime.io/advisories/CVE-2026-123018/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-123018/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 11:45:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77933: DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment</title><link>https://agentprime.io/advisories/CVE-2026-77933/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77933/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 00:46:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-77932: DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent</title><link>https://agentprime.io/advisories/CVE-2026-77932/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77932/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 00:46:11 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-80104: DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename</title><link>https://agentprime.io/advisories/CVE-2026-80104/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80104/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 20:18:35 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-73034: DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header</title><link>https://agentprime.io/advisories/CVE-2026-73034/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73034/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 19:31:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-4505: eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload</title><link>https://agentprime.io/advisories/CVE-2026-4505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4505/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 20:02:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-4504: eosphoros-ai db-gpt Incomplete Fix editor sql injection</title><link>https://agentprime.io/advisories/CVE-2026-4504/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4504/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 20:02:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3409: eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection</title><link>https://agentprime.io/advisories/CVE-2026-3409/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3409/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Mar 2026 04:02:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-6772: eosphoros-ai db-gpt import import_flow path traversal</title><link>https://agentprime.io/advisories/CVE-2025-6772/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6772/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 18:31:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10834: Arbitrary File Write in eosphoros-ai/db-gpt</title><link>https://agentprime.io/advisories/CVE-2024-10834/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10834/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 10:11:01 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-0452: Arbitrary File Deletion in eosphoros-ai/DB-GPT</title><link>https://agentprime.io/advisories/CVE-2025-0452/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0452/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 10:08:51 GMT</pubDate><category>CVE</category></item></channel></rss>