CVE-2026-123019: eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere
A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is the function execmodule of the file hfadapter.py of the component HuggingFace Adapter. Executing a manipulation of the argument trustremotecode can lead to inclusion of functionality from untrusted control sphere. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Event History
Frequently Asked Questions
Who is exposed to this issue?
DB-GPT deployments using the HuggingFace Adapter are affected through version 0.8.2. The issue is remotely reachable and does not require prior privileges or user interaction according to the supplied severity vector.
What must an attacker do to exploit it?
An attacker must manipulate the trust_remote_code argument used by the HuggingFace Adapter's hf_adapter.py exec_module function. This can cause functionality from an untrusted control sphere to be included.
How urgent is remediation?
Public exploit code is available, and the exploitability assessment is marked as proven. The project had been notified through an issue report but had not responded at the time of the provided information.