CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

PT-2026-103617

Name of the Vulnerable Software and Affected Versions DB-GPT version 0.8.0 Description The sandbox API silently falls back to LocalRuntime, which allows for the execution of arbitrary code on the host system. Recommendations At the moment, there is no information about a newer version that contai...

CVE-2026-51869: Improper Access Control

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

CVE-2026-51869

The DB-GPT v0.8.0 sandbox API contains a security weakness where it silently falls back to LocalRuntime . This flaw allows an attacker to execute arbitrary code on the host system. The vulnerability is associated with CWE-284 (Improper Access Control) and has a CRITICAL CVSS 3.1 base score of 9.8...

CVE-2026-51869

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

EUVD-2026-90414

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host...

Mail.ru: xss in ub.icq.net

XSS in ub.icq.net via HTML file upload. icq.net is a sandbox API domain without cookies or HTTP authentication...