CVE-2026-51866 | eosphoros-ai DB-GPT 0.7.5/0.8.0 Skill Upload /api/v1/skills/upload code injection

A vulnerability has been found in eosphoros-ai DB-GPT 0.7.5/0.8.0 and classified as critical. This impacts an unknown function of the file /api/v1/skills/upload of the component Skill Upload. Performing a manipulation results in code injection.

This vulnerability was named CVE-2026-51866. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More