GitHub Advisoryadvisory · PyPI

GHSA-hhw5-29f6-hf4x DB-GPT Absolute Path Traversal vulnerability

CRITICAL Published 2025-03-20 Modified 2026-10-27 Official page ↗
Aliases
CVE-2024-10831
Ecosystem
PyPI
Packages
dbgpt
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-36
Reviewed
2025-03-21

Affected packages

• PyPI dbgpt: <= 0.6.0 (no fix yet)

Description

In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.

Related

Alias · CVE (1)

  • CVE-2024-10831 In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. vulnerability

Weakness · CWE (1)

  • CWE-36 Absolute Path Traversal weakness

References