CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

CVE-2026-51869

The DB-GPT v0.8.0 sandbox API contains a vulnerability where it silently falls back to LocalRuntime . This flaw allows for the execution of code directly on the host machine. Exploitation details and specific remediation steps are not provided in the documents.

EUVD-2026-90414

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

PT-2026-103617

Name of the Vulnerable Software and Affected Versions DB-GPT version 0.8.0 Description The sandbox API silently falls back to LocalRuntime, which allows for the execution of arbitrary code on the host system. Recommendations At the moment, there is no information about a newer version that contai...

CVE-2026-90618

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

CVE-2026-90618 GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

CVE-2026-90618

GH05TCREW PentestAgent (up to commit cf882dabea3ed91cef016cdd115e5426315665a2) is vulnerable to OS command injection in the function LocalRuntime.execute_command within the file runtime/runtime.py. The flaw allows a remote, unauthenticated attacker with no user interaction to execute arbitrary co...

CVE-2026-90618 GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

EUVD-2026-77177

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

PT-2026-91032

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute command of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

CVE-2026-90618: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...