---
id: CVE-2026-123020
title: >-
  eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt
  special elements in template engine
summary: >-
  A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1.
  The affected element is the function FileBasedSkill.get_prompt of the file
  packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py of the
  component…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-1336
  - CWE-791
vendor: eosphoros-ai
product: DB-GPT
affected:
  - DB-GPT 0.8.0
  - DB-GPT 0.8.1
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:43:37.671018Z'
exploitAvailable: true
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:44:10.483Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-123020'
references:
  - url: 'https://vuldb.com/vuln/431394'
    label: >-
      VDB-431394 | eosphoros-ai DB-GPT Jinja2 Template __init__.py
      FileBasedSkill.get_prompt special elements in template engine
  - url: 'https://vuldb.com/vuln/431394/cti'
    label: 'VDB-431394 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-123020'
    label: CVE-2026-123020 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1033118'
    label: >-
      Submit #1033118 | eosphoros-ai DB-GPT 0.8.1 CWE-1336 Improper
      Neutralization of Special Elements Used in a T
  - url: 'https://github.com/eosphoros-ai/DB-GPT/issues/3291'
  - url: 'https://github.com/eosphoros-ai/DB-GPT/pull/3111'
  - url: >-
      https://github.com/ybyu-ieu/agent-security-advisories/blob/main/dbgpt/dbgpt-skill-template-jinja2-ssti-rce.md
  - url: >-
      https://github.com/eosphoros-ai/DB-GPT/commit/a9e7a3c026d114fcfb4ffe3eaf78851a636ded16
  - url: 'https://github.com/eosphoros-ai/DB-GPT/releases/tag/v0.8.2'
  - url: 'https://github.com/eosphoros-ai/DB-GPT/'
tags:
  - cve.org
  - exploit-available
ingestedAt: '2026-11-05T22:38:31.876Z'
---

## Overview

A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. The affected element is the function FileBasedSkill.get_prompt of the file packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py of the component Jinja2 Template Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.8.2 is sufficient to fix this issue. The identifier of the patch is a9e7a3c026d114fcfb4ffe3eaf78851a636ded16. It is suggested to upgrade the affected component.

## Affected

- `DB-GPT 0.8.0`
- `DB-GPT 0.8.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.