CVE-2026-51864 | eosphoros-ai DB-GPT 0.7.5/0.8.0 python_file_upload python_upload_api.py path traversal

September 30, 2026 Yanac

A vulnerability classified as critical was found in eosphoros-ai DB-GPT 0.7.5/0.8.0. This vulnerability affects unknown code of the file packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py of the component python_file_upload. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-51864. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More