{"id":"CVE-2024-10833","kind":"vulnerability","aliases":["CVE-2024-10833","GHSA-j9g7-mqhh-9hxf"],"related":[],"title":"DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload","description":"eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.","summary":"DB-GPT, an AI database assistant framework, builds the storage path for uploaded knowledge documents from the user-supplied filename, so absolute paths are accepted. An attacker who can reach the upload endpoint can write files to arbitrary locations on the server, which can lead to code execution.","severity":"critical","cvss":9.1,"epss":0.00839,"exploited":false,"exploited_at":null,"products":[{"name":"dbgpt","fixed":["0.6.2"],"affected":"< 0.6.2","ecosystem":"pypi"},{"name":"dbgpt db-gpt","fixed":[],"affected":"= 0.6.0","ecosystem":"vendor"}],"ecosystems":["pypi","vendor"],"tags":["ai-tooling","cwe-22","cwe-36","dbgpt","pypi","python","self-hosted"],"not_affected_if":["fixed-version","no-knowledge-upload-exposed"],"how_to_check":"- Run `pip show dbgpt` and confirm the installed version is below `0.6.2`.\n- Check whether the knowledge upload route `knowledge/{space_name}/document/upload` is reachable from untrusted networks.","fix":"- Upgrade the `dbgpt` PyPI package to `0.6.2` or later.\n- Until upgraded, block external access to the knowledge upload endpoint.","status":"open","published_at":"2025-03-20T10:15:20+00:00","first_seen_at":"2026-10-27T16:25:42+00:00","triaged_at":"2026-10-27T16:27:45+00:00","updated_at":"2026-10-27T16:33:07+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-27T16:27:45Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade the `dbgpt` PyPI package to `0.6.2` or later.\n- Until upgraded, block external access to the knowledge upload endpoint.","reach":"unknown","title":"DB-GPT: knowledge upload path traversal lets attackers write arbitrary server files","impact":"high","summary":"DB-GPT, an AI database assistant framework, builds the storage path for uploaded knowledge documents from the user-supplied filename, so absolute paths are accepted. An attacker who can reach the upload endpoint can write files to arbitrary locations on the server, which can lead to code execution.","category":"ai-tooling","nicknames":[],"who_cares":["python","pypi","dbgpt","self-hosted"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker writes arbitrary files to server, possibly executing code","analyst_note":"Sources do not say whether authentication is required for the upload endpoint or whether it is enabled by default; check the GHSA-j9g7-mqhh-9hxf advisory and the 0.6.2 release diff.","how_to_check":"- Run `pip show dbgpt` and confirm the installed version is below `0.6.2`.\n- Check whether the knowledge upload route `knowledge/{space_name}/document/upload` is reachable from untrusted networks.","needs_analyst":true,"not_affected_if":["fixed-version","no-knowledge-upload-exposed"],"who_is_affected":"Teams running the dbgpt Python package before 0.6.2 that expose its knowledge API. The flaw sits in the document upload path, so instances that do not use the knowledge upload feature or keep the API off the network are lower risk. Teams on 0.6.2 or later are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000662,"input_tokens":3421,"output_tokens":640,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-10833':14A,22A '-2024':13A,21A '-22':32B '-36':34B '/db-gpt':94C '/document/upload':11A '0.6.0':96C '9hxf':19A 'absolut':4A,64B,118C,148C 'accept':67B 'ai':29B,45B,93C 'ai-tool':28B 'allow':121C 'api':107C 'arbitrari':80B,101C,127C 'aris':135C 'assist':47B 'attack':69B,122C 'build':49B 'code':89B 'construct':146C 'control':143C 'cve':12A,20A 'cwe':31B,33B 'databas':46B 'db':2A,26A,42B 'db-gpt':1A,25A,41B 'dbgpt':23A,24A,35B 'doc_file.filename':138C 'document':56B 'enabl':144C 'endpoint':75B,109C 'eosphoro':92C 'eosphoros-ai':91C 'execut':90B 'file':78B,102C,112C,125C 'filenam':62B 'framework':48B 'ghsa':16A 'ghsa-j9g7-mqhh-9hxf':15A 'gpt':3A,27A,43B 'host':40B 'j9g7':17A 'knowledg':8A,55B,106C,114C 'lead':87B 'locat':81B,128C 'mqhh':18A 'name':10A 'paramet':139C 'path':5A,52B,65B,119C,149C 'pypi':36B 'python':37B 'reach':72B 'self':39B 'self-host':38B 'server':84B,132C 'space':9A 'storag':51B 'suppli':61B 'suscept':116C 'target':131C 'tool':30B 'travers':6A,120C 'upload':54B,74B,111C 'user':60B,142C 'user-control':141C 'user-suppli':59B 'version':95C 'vulner':98C,134C 'write':77B,103C,124C","nicknames":[],"mitigations":[],"who_affected":"Teams running the dbgpt Python package before 0.6.2 that expose its knowledge API. The flaw sits in the document upload path, so instances that do not use the knowledge upload feature or keep the API off the network are lower risk. Teams on 0.6.2 or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2025-03-20T10:15:20+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-j9g7-mqhh-9hxf","url":"https://github.com/advisories/GHSA-j9g7-mqhh-9hxf","severity":"critical","published_at":"2025-03-20T12:32:40+00:00","modified_at":"2026-10-27T16:23:18+00:00","first_seen_at":"2026-10-27T16:25:42+00:00","fetched_at":"2026-10-27T16:25:42+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-10833","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10833","severity":null,"published_at":"2025-03-20T10:15:20+00:00","modified_at":"2026-06-17T06:56:31+00:00","first_seen_at":"2026-10-27T16:33:07+00:00","fetched_at":"2026-10-27T16:33:07+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}