{"id":"CVE-2024-10831","kind":"vulnerability","aliases":["CVE-2024-10831","GHSA-hhw5-29f6-hf4x"],"related":[],"title":"DB-GPT Absolute Path Traversal vulnerability","description":"In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.","summary":"DB-GPT, an AI database assistant, has an upload endpoint that builds file paths from user-supplied `file_key` and `doc_file.filename` values. An attacker can write arbitrary files to any location on the server, such as overwriting SSH keys or other system files.","severity":"critical","cvss":9.1,"epss":0.00839,"exploited":false,"exploited_at":null,"products":[{"name":"dbgpt","fixed":[],"affected":"<= 0.6.0","ecosystem":"pypi"},{"name":"dbgpt db-gpt","fixed":[],"affected":"= 0.6.0","ecosystem":"vendor"}],"ecosystems":["pypi","vendor"],"tags":["ai-apps","ai-tooling","cwe-36","pypi","python","self-hosted"],"not_affected_if":["not-installed","upload-endpoint-not-exposed"],"how_to_check":"- Check the installed version with `pip show dbgpt`; versions up to and including `0.6.0` are affected.\n- Confirm whether the upload endpoint is reachable from untrusted networks.","fix":"- Upgrade `dbgpt` to a version newer than `0.6.0`; the sources do not name the fixed version, so check the GHSA advisory.\n- Restrict access to the upload endpoint until patched.","status":"open","published_at":"2025-03-20T10:15:20+00:00","first_seen_at":"2026-10-27T16:25:42+00:00","triaged_at":"2026-10-27T16:27:45+00:00","updated_at":"2026-10-27T16:33:07+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-27T16:27:45Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `dbgpt` to a version newer than `0.6.0`; the sources do not name the fixed version, so check the GHSA advisory.\n- Restrict access to the upload endpoint until patched.","reach":"unknown","title":"DB-GPT: file upload path traversal lets attackers write files anywhere","impact":"high","summary":"DB-GPT, an AI database assistant, has an upload endpoint that builds file paths from user-supplied `file_key` and `doc_file.filename` values. An attacker can write arbitrary files to any location on the server, such as overwriting SSH keys or other system files.","category":"ai-tooling","nicknames":[],"who_cares":["python","pypi","self-hosted","ai-apps"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker writes arbitrary files, overwriting SSH keys or system files for code execution.","analyst_note":"Confirm whether authentication is required for the upload endpoint and find the fixed version in https://github.com/advisories/GHSA-hhw5-29f6-hf4x.","how_to_check":"- Check the installed version with `pip show dbgpt`; versions up to and including `0.6.0` are affected.\n- Confirm whether the upload endpoint is reachable from untrusted networks.","needs_analyst":true,"not_affected_if":["upload-endpoint-not-exposed","not-installed"],"who_is_affected":"Teams running DB-GPT 0.6.0 or earlier with the file upload endpoint reachable by users or the network. Deployments where that endpoint is not exposed or the service is not installed can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000642,"input_tokens":3417,"output_tokens":600,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-10831':10A,18A '-2024':9A,17A '-36':31B '/db-gpt':86C '0.6.0':88C '29f6':14A 'absolut':4A,97C 'ai':25B,28B,41B,85C 'ai-app':24B 'ai-tool':27B 'allow':102C 'app':26B 'arbitrari':65B,107C,110C 'aris':118C 'assist':43B 'attack':62B,104C 'build':49B 'construct':132C 'control':129C 'cve':8A,16A 'cwe':30B 'databas':42B 'db':2A,22A,38B 'db-gpt':1A,21A,37B 'dbgpt':19A,20A 'directori':138C 'doc_file.filename':59B,124C 'enabl':130C 'endpoint':47B,90C 'eosphoro':84C 'eosphoros-ai':83C 'essenti':144C 'exploit':153C 'file':50B,56B,66B,81B,93C,108C,121C,146C 'ghsa':12A 'ghsa-hhw5-29f6-hf4x':11A 'gpt':3A,23A,39B 'hf4x':15A 'hhw5':13A 'host':36B 'intend':137C 'issu':117C 'key':57B,77B,122C,150C 'lead':141C 'locat':69B,111C 'outsid':135C 'overwrit':75B,143C 'paramet':125C 'path':5A,51B,98C,134C 'pypi':32B 'python':33B 'self':35B 'self-host':34B 'server':72B,115C 'ssh':76B,149C 'suppli':55B 'system':80B,145C 'target':114C 'tool':29B 'travers':6A,99C 'upload':46B,92C,106C 'user':54B,128C 'user-control':127C 'user-suppli':53B 'valu':60B 'version':87C 'vulner':7A,95C,101C 'write':64B","nicknames":[],"mitigations":[],"who_affected":"Teams running DB-GPT 0.6.0 or earlier with the file upload endpoint reachable by users or the network. Deployments where that endpoint is not exposed or the service is not installed can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2025-03-20T10:15:20+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-hhw5-29f6-hf4x","url":"https://github.com/advisories/GHSA-hhw5-29f6-hf4x","severity":"critical","published_at":"2025-03-20T12:32:40+00:00","modified_at":"2026-10-27T16:22:12+00:00","first_seen_at":"2026-10-27T16:25:42+00:00","fetched_at":"2026-10-27T16:25:42+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-10831","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10831","severity":null,"published_at":"2025-03-20T10:15:20+00:00","modified_at":"2026-06-17T06:56:31+00:00","first_seen_at":"2026-10-27T16:33:07+00:00","fetched_at":"2026-10-27T16:33:07+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}