What is GHSA-jxc6-m74m-vgpx?

GHSA-jxc6-m74m-vgpx is a security advisory published by GitHub Security Advisories with Critical severity. DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src...

Which CVE IDs does GHSA-jxc6-m74m-vgpx cover?

GHSA-jxc6-m74m-vgpx covers the following CVE IDs: CVE-2026-51863. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jxc6-m74m-vgpx?

GHSA-jxc6-m74m-vgpx has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-jxc6-m74m-vgpxCriticalCVSS 9.1

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src...

Vendor

GitHub Security Advisories

Published

October 29, 2026

Last Modified

November 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51863 →

📋 Description

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51863
https://github.com/eosphoros-ai/DB-GPT/issues/3028
https://gist.github.com/Ro1ME/8be4e1bad6c9d7a777ec7638b1192dee
https://github.com/advisories/GHSA-jxc6-m74m-vgpx