[ Vendor · 2 CVEs ]
eosphoros-ai
CVEs affecting eosphoros-ai published in the last 30 days, plus any eosphoros-ai CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77932 | 20 Oct 2026 | CVSS 9.8 | eosphoros-ai DB-GPTDB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock… | |
| CVE-2026-77933 | 20 Oct 2026 | CVSS 9.8 | eosphoros-ai DB-GPTDB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and… |