CVE-2026-51862 | eosphoros-ai DB-GPT 0.8.0 skill_upload agentic_data_api.py path traversal

September 30, 2026 Yanac

A vulnerability was found in eosphoros-ai DB-GPT 0.8.0. It has been rated as critical. Impacted is an unknown function of the file packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py of the component skill_upload. Performing a manipulation results in path traversal.

This vulnerability is identified as CVE-2026-51862. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More