2026-03-21 · 2 min · BitNinja Team

New SQL Injection Risk in eosphoros-ai db-gpt

A critical vulnerability has been identified in the eosphoros-ai db-gpt system, affecting all versions up to 0.7.5. This flaw allows attackers to execute a remote SQL injection through the component labeled as 'Incomplete Fix'. Consequently, it opens up a path for unauthorized...