CVE-2026-123018

A flaw was found in DB-GPT. A remote attacker could exploit this vulnerability by submitting manipulated input to the executecode function within the CodeAction component. This flaw allows the attacker to execute arbitrary code on the underlying host system, potentially compromising the host...