EUVD-2026-13804Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7DescriptionCVE.org
A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. This vulnerability affects unknown code of the file /api/v1/editor/ of the component Incomplete Fix. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
SQL injection in eosphoros-ai db-gpt versions up to 0.7.5 allows unauthenticated remote attackers to manipulate the /api/v1/editor/ endpoint and execute arbitrary database queries. Public exploit code is available for this vulnerability, and no patch has been released despite vendor notification. This vulnerability impacts confidentiality, integrity, and availability of affected systems.
Technical ContextAI
DB-GPT is an AI-native data application development framework by eosphoros-ai. The vulnerability is classified as CWE-89 (SQL Injection), indicating improper neutralization of special SQL query elements. The flaw specifically affects the /api/v1/editor/ API endpoint and represents an incomplete remediation attempt from a prior security issue. The affected product is identified via CPE cpe:2.3:a:eosphoros-ai:db-gpt:*:*:*:*:*:*:*:* for all versions through 0.7.5. SQL injection vulnerabilities occur when user-supplied input is incorporated into SQL queries without proper sanitization or parameterization, allowing attackers to manipulate database queries and potentially access, modify, or delete data.
RemediationAI
Organizations should immediately upgrade DB-GPT to a version newer than 0.7.5 if available, though vendor non-responsiveness suggests a patch may not exist. Until an official fix is released, implement compensating controls: restrict network access to the /api/v1/editor/ endpoint using firewall rules or API gateway policies to allow only trusted IP ranges; deploy a web application firewall (WAF) with SQL injection detection rules to filter malicious requests; implement input validation and sanitization at the application or reverse proxy layer; monitor database and application logs for SQL injection attempts referencing the /api/v1/editor/ path. Given the vendor's lack of response, organizations with high-risk profiles should consider migrating to alternative solutions or forking the open-source project to apply their own security fixes. Reference the Huntr bounty disclosure at https://huntr.com/bounties/e32fda74-ca83-431c-8de8-08274ba686c9 for technical details on the vulnerability mechanism.
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Uplo
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queri
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. Rated critical sev
In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. Rated c
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file
A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/de
eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/up
In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance
We need to produce a JSON with all required fields, synthesizing data from all sources. We are told: "A vulnerability w
An unrestricted file upload vulnerability exists in eosphoros-ai DB-GPT versions up to 0.7.5 within the module_plugin.re
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL que
A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today