Cpe:2.3:a:eosphoros_ai:db_gpt:*:*:*:*:*:*:*:*

DB-GPT version 0.8.1 is vulnerable to an unauthenticated path traversal attack allowing remote code execution via a crafted user_id HTTP header.