---
id: "CVE-2024-10831"
kind: "vulnerability"
aliases: ["CVE-2024-10831", "GHSA-hhw5-29f6-hf4x"]
title: "DB-GPT Absolute Path Traversal vulnerability"
severity: "critical"
cvss: 9.1
epss: 0.00839
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "dbgpt", "fixed": [], "affected": "<= 0.6.0", "ecosystem": "pypi"}, {"name": "dbgpt db-gpt", "fixed": [], "affected": "= 0.6.0", "ecosystem": "vendor"}]
ecosystems: ["pypi", "vendor"]
tags: ["ai-apps", "ai-tooling", "cwe-36", "pypi", "python", "self-hosted"]
not_affected_if: ["not-installed", "upload-endpoint-not-exposed"]
published_at: "2025-03-20T10:15:20+00:00"
first_seen_at: "2026-10-27T16:25:42+00:00"
updated_at: "2026-10-27T16:33:07+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-hhw5-29f6-hf4x", "first_seen_at": "2026-10-27T16:25:42+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10831", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# DB-GPT Absolute Path Traversal vulnerability

DB-GPT, an AI database assistant, has an upload endpoint that builds file paths from user-supplied `file_key` and `doc_file.filename` values. An attacker can write arbitrary files to any location on the server, such as overwriting SSH keys or other system files.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:dbgpt affected <= 0.6.0 fixed ?
- vendor:dbgpt db-gpt affected = 0.6.0 fixed ?

## How to check

- Check the installed version with `pip show dbgpt`; versions up to and including `0.6.0` are affected.
- Confirm whether the upload endpoint is reachable from untrusted networks.

## Fix

- Upgrade `dbgpt` to a version newer than `0.6.0`; the sources do not name the fixed version, so check the GHSA advisory.
- Restrict access to the upload endpoint until patched.

## Timeline

- 2026-10-27T16:25:42+00:00 ghsa https://github.com/advisories/GHSA-hhw5-29f6-hf4x
- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-10831

## From the sources

In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_