HighVulnerability
CVE-2026-123019: eosphoros-ai DB-GPT untrusted code inclusion via trust_remote_code
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-123019
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
A weakness in eosphoros-ai DB-GPT up to 0.8.2 affects the exec_module function in hf_adapter.py, part of the HuggingFace Adapter component. Manipulating the trust_remote_code argument can lead to inclusion of functionality from an untrusted control sphere, and the attack can be launched remotely. A public exploit exists, and the project was informed through an issue report but has not responded yet.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoA Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor AttacksSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database