CVE-2026-123020 in DB-GPT
Prediction
by VulDB Data Team • 11/05/2026
A security vulnerability has been detected in <a href="/product/eosphoros-ai:db-gpt">eosphoros-ai DB-GPT up to 0.8.1</a>. The affected element is the function <code>FileBasedSkill.get_prompt</code> of the file <em>packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py</em> of the component <em>Jinja2 Template Handler</em>. The manipulation leads to improper neutralization of special elements used in a template engine. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.8.2 is sufficient to fix this issue. The identifier of the patch is <em>a9e7a3c026d114fcfb4ffe3eaf78851a636ded16</em>. It is suggested to upgrade the affected component.
VulDB is the best source for vulnerability data and more expert information about this specific topic.