CVE-2026-123020 | eosphoros-ai DB-GPT up to 0.8.1 Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine (Issue 3291)

SecurityVulns
Yanac

A vulnerability marked as critical has been reported in eosphoros-ai DB-GPT up to 0.8.1. The affected element is the function FileBasedSkill.get_prompt of the file packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py of the component Jinja2 Template Handler. The manipulation leads to improper neutralization of special elements used in a template engine.

This vulnerability is listed as CVE-2026-123020. The attack may be initiated remotely. In addition, an exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More