CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

CVE-2026-51869

The DB-GPT v0.8.0 sandbox API contains a vulnerability where it silently falls back to LocalRuntime . This flaw allows for the execution of code directly on the host machine. Exploitation details and specific remediation steps are not provided in the documents.

EUVD-2026-90414

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

Mail.ru: xss in ub.icq.net

XSS in ub.icq.net via HTML file upload. icq.net is a sandbox API domain without cookies or HTTP authentication...