PT-2025-12075 · Unknown · Eosphoros-Ai/Db-Gpt

Published 2025-03-20 · Updated 2025-10-15 · CVE-2024-10902

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version v0.6.0

Description The issue concerns Arbitrary File Upload with Path Traversal in the web API POST /v1/personal/agent/upload. This allows unauthorized attackers to upload arbitrary files to the victim's file system at any location, potentially leading to remote code execution (RCE) by writing malicious files, such as a malicious init .py in Python's /site-packages/ directory.

Recommendations For eosphoros-ai/db-gpt version v0.6.0, consider disabling the POST /v1/personal/agent/upload API endpoint until a patch is available to prevent exploitation. Restrict access to sensitive directories in the file system to minimize the risk of malicious file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-73

CWE-22

Related Identifiers

CVE-2024-10902

GHSA-3XQ5-X4FJ-RFF7

Affected Products

Eosphoros-Ai/Db-Gpt

References · 7

• 🔥 https://huntr.com/bounties/f7fbf76e-aa1c-4106-b007-e9579f4f7d5f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-10902 · Security Note
• https://osv.dev/vulnerability/CVE-2024-10902 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3xq5-x4fj-rff7 · Vendor Advisory
• https://github.com/eosphoros-ai/DB-GPT · Note
• https://twitter.com/CVEnew/status/1903016829733245267 · Twitter Post
• https://twitter.com/nkoorty/status/1978434138404217286 · Twitter Post