DB-GPT versions up to 0.8.2 embed a static MYSQL_ROOT_PASSWORD of 'root' in its default docker-compose.yml and expose the MySQL port 3306 to all network interfaces. An attacker who can reach this port, or the internal dbgptnet network, can authenticate as root@% without additional credentials. Once authenticated, the root account possesses FULL DBA privileges, including SUPER and FILE permissions, allowing arbitrary SQL execution, reading and writing files on the host, and potentially executing system commands. This effectively gives an attacker complete control over the database and a strong foothold to compromise the host machine.

The vulnerability affects the eosphoros-ai DB-GPT product, specifically versions 0.8.2 and earlier. No other products or versions are reported as affected.

The CVSS score of 9.3 indicates critical severity, and the lack of authentication barriers and a hardcoded password makes the exploit straightforward for any network attacker. The EPSS score is not available, but the exploitability remains high due to the exposed port and default root credentials. The vulnerability is not listed in CISA's KEV catalog, yet it can be leveraged with minimal effort to achieve full database takeover and potential system compromise.