Skip to content
Threat Feed
Subscribe

Product

DB-GPT (<= 0.8.2)

1 brief RSS
critical advisory

Unauthenticated RCE in DB-GPT via Insecure Mock Authentication

DB-GPT versions 0.8.2 and earlier contain an unauthenticated remote code execution vulnerability in the ReAct agent endpoint that allows attackers to execute arbitrary system commands as root.

DB-GPT remote-code-execution web-application container-security vulnerability credential-exposure mysql
1r 3t 1c