EUVD-2026-117415

A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is the function execmodule of the file hfadapter.py of the component HuggingFace Adapter. Executing a manipulation of the argument trustremotecode can lead to inclusion of functionality from untrusted control sphere. The...

CVE-2026-123019

A weakness exists in eosphoros-ai DB-GPT up to version 0.8.2 within the HuggingFace Adapter component. Specifically, the exec_module function in the hf_adapter.py file is vulnerable to the manipulation of the trust_remote_code argument. This flaw allows for the inclusion of functionality from an ...