Skip to content
OpenAdvisories

Vendor

eosphoros-ai

21 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73034 Public exploit Scanner template

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoi…