Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: poc
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.

Affected versions

No affected packages have been listed by the sources.

References 2

GitHub · eosphoros-ai/DB-GPT

gist.github.com