CVE-2026-123018 | eosphoros-ai DB-GPT up to 0.8.2 CodeAction code_utils.py execute_code code injection (Issue 3287)

November 5, 2026 Yanac

A vulnerability identified as critical has been detected in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the function execute_code of the file code_utils.py of the component CodeAction. Performing a manipulation results in code injection.

This vulnerability is identified as CVE-2026-123018. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More