DB-GPT HuggingFace adapter loads untrusted code via trust_remote_code
Remote attackers could slip malicious programs into an AI data tool.
Summary
A manipulated trust_remote_code argument in the HuggingFace Adapter of DB-GPT up to 0.8.2 can load functionality from an untrusted source. The attack can be launched remotely, and the exploit is public.
What to do
Versions up to 0.8.2 are affected. Check that the DB-GPT you run is newer than 0.8.2 and read the vendor's advisory. The vendor has not yet responded.
Products and platforms
CVE IDs
Sources
Times
First published
First seen