Vulnerability · Published Aug 25, 2026 · Assigned by VulnCheck
CVE-2026-80104DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
Critical 9.8
In plain English
A critical-severity path traversal in DB-GPT from eosphoros-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Official description
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py takes file.filename as given and writes the request body to upload_dir / filename. A path composed with that operator discards the left operand when the right one is absolute and follows parent references otherwise, so a filename such as ../../../tmp/x or /tmp/x resolves outside the intended directory; nothing canonicalises the result, checks that it remains under the upload root, or prevents a .py suffix. The route's only dependency is get_user_from_headers in dbgpt_serve/utils/auth.py, which returns a request carrying the admin role whether or not a user_id header is supplied, so the endpoint is reachable without credentials. A remote attacker holding no account can therefore write attacker-controlled bytes to any path the server process can write, place a new Python module inside the application package or replace one the application already imports, and obtain code execution in the server process when that module is next imported.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| eosphoros-ai | DB-GPT | 0.8.0 – before 0.8.1 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/eosphoros-ai/DB-GPT product
- https://github.com/eosphoros-ai/DB-GPT/blob/v0.8.0/packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py technical-description
- DB-GPT v0.8.1 Release Notes release-notes
- https://pypi.org/project/dbgpt-app/ product
- VulnCheck Advisory: DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename third-party-advisory