Skip to content
Heist/ feed
Back to feed
CriticalFix available

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

Type: advisorySources: OSV

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.

Products
dbgpt
Affected versions
0.4.7, 0.5.0, 0.5.1, 0.5.10, 0.5.1rc0, 0.5.2, 0.5.2rc0, 0.5.3, 0.5.3rc0, 0.5.4, 0.5.4rc0, 0.5.5, 0.5.5rc0, 0.5.6, 0.5.6rc0, 0.5.7, 0.5.7rc0, 0.5.8, 0.5.9, 0.5.9rc0, 0.6.1
Fixed versions
0.6.2
CVEs
CVE-2024-10833
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 18:46 UTC · Revision 1

Source evidence

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

core-osv · Original source

Published 20 Mar 2025, 12:32 UTC

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.

osv:GHSA-j9g7-mqhh-9hxf

dbgpt

Fixed versions: 0.6.2

Complete source record
{
  "id": "24fdc9db40dd8804ddffbd917af21eb4098d6bd267f37c84f6f18ed10dee6dd8",
  "url": "https://osv.dev/vulnerability/GHSA-j9g7-mqhh-9hxf",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload",
    "summary": "eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.",
    "evidence": "osv:GHSA-j9g7-mqhh-9hxf",
    "products": [
      {
        "name": {
          "value": "dbgpt",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.6.2",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.4.7",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.10",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.1rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.2rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.3rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.4",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.4rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.5",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.5rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.6",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.6rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.7",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.7rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.8",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.9",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.9rc0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.1",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "GHSA-j9g7-mqhh-9hxf",
      "aliases": [
        "CVE-2024-10833",
        "GHSA-j9g7-mqhh-9hxf",
        "PYSEC-2026-324"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.6.2"
                }
              ]
            }
          ],
          "package": {
            "name": "dbgpt",
            "purl": "pkg:pypi/dbgpt",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.4.7",
            "0.5.0",
            "0.5.1",
            "0.5.10",
            "0.5.1rc0",
            "0.5.2",
            "0.5.2rc0",
            "0.5.3",
            "0.5.3rc0",
            "0.5.4",
            "0.5.4rc0",
            "0.5.5",
            "0.5.5rc0",
            "0.5.6",
            "0.5.6rc0",
            "0.5.7",
            "0.5.7rc0",
            "0.5.8",
            "0.5.9",
            "0.5.9rc0",
            "0.6.1"
          ],
          "database_specific": {
            "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-j9g7-mqhh-9hxf/GHSA-j9g7-mqhh-9hxf.json"
          }
        }
      ],
      "modified": "2026-10-27T16:30:07.135197616Z",
      "provider": "osv",
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2024-10833",
        "https://github.com/eosphoros-ai/DB-GPT/commit/780ce803e325b87f4ddfbe5824451e379aeee56c",
        "https://github.com/eosphoros-ai/DB-GPT",
        "https://github.com/pypa/advisory-database/tree/main/vulns/dbgpt/PYSEC-2026-324.yaml",
        "https://huntr.com/bounties/dc58e981-e325-4c11-b4e1-1095890fd15a",
        "https://pypi.org/project/dbgpt"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-22",
          "CWE-36"
        ],
        "severity": "CRITICAL",
        "github_reviewed": true,
        "nvd_published_at": "2025-03-20T10:15:20Z",
        "github_reviewed_at": "2025-03-21T17:24:47Z"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-10833",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/database_specific/severity"
  },
  "source_id": "core-osv",
  "document_id": 462876,
  "published_at": "2025-03-20T12:32:40+00:00"
}