Executive brief
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
Affected products
- PyPI dbgpt
Junglewise Threat Intelligence
CVE-2024-10835: PYSEC-2026-325 - DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
CVE-2024-10835 · Severity: low · CVSS 3 · Published 2026-06-29
Technologies: dbgpt (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1289 - DB-GPT vulnerable to Cross-Site Request Forgery
- PYSEC-2026-1291 - DB-GPT Path Traversal vulnerability
- PYSEC-2026-1290 - DB-GPT Uncontrolled Resource Consumption vulnerability
- PYSEC-2026-324 - DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
- PYSEC-2026-321 - DB-GPT vulnerable to Arbitrary File Upload with Path Traversal