CVE-2025-51458 Details
Description
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.
A SQL injection vulnerability has been identified in Eosphoros AI DB-GPT version 0.7.0. This issue allows remote attackers to execute arbitrary SQL statements by sending crafted input to the '/v1/editor/sql/run' or '/v1/editor/chart/run' endpoints. The vulnerability arises because user-provided SQL is executed without proper parameterization, leaving all database types except DuckDB completely unprotected.
Users are advised to update to the patched version of DB-GPT, which is available in the project's GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 22, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/eosphoros-ai/DB-GPT/pull/2650 | [email protected] | ExploitIssue Tracking |
| https://www.gecko.security/blog/cve-2025-51458 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| dbgpt db-gpt | 0.7.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 11, 2025 | Initial Analysis | [email protected] |
| Jul 22, 2025 | New CVE Received | [email protected] |
| Jul 22, 2025 | CVE Modified | CISA-ADP |