Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai
CVE-2024-10833Arbitrary File Write in eosphoros-ai/db-gpt
Critical 9.1
In plain English
A critical-severity security flaw in eosphoros-ai/db-gpt from eosphoros-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | dbgpt | 0.6.2 | GHSA-j9g7-mqhh-9hxf |
| PyPI | dbgpt | 0.6.2 | PYSEC-2026-324 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| eosphoros-ai | eosphoros-ai/db-gpt | unspecified – through latest |
Weakness: CWE-36 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H