---
id: "CVE-2024-10833"
kind: "vulnerability"
aliases: ["CVE-2024-10833", "GHSA-j9g7-mqhh-9hxf"]
title: "DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload"
severity: "critical"
cvss: 9.1
epss: 0.00839
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "dbgpt", "fixed": ["0.6.2"], "affected": "< 0.6.2", "ecosystem": "pypi"}, {"name": "dbgpt db-gpt", "fixed": [], "affected": "= 0.6.0", "ecosystem": "vendor"}]
ecosystems: ["pypi", "vendor"]
tags: ["ai-tooling", "cwe-22", "cwe-36", "dbgpt", "pypi", "python", "self-hosted"]
not_affected_if: ["fixed-version", "no-knowledge-upload-exposed"]
published_at: "2025-03-20T10:15:20+00:00"
first_seen_at: "2026-10-27T16:25:42+00:00"
updated_at: "2026-10-27T16:33:07+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-j9g7-mqhh-9hxf", "first_seen_at": "2026-10-27T16:25:42+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10833", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

DB-GPT, an AI database assistant framework, builds the storage path for uploaded knowledge documents from the user-supplied filename, so absolute paths are accepted. An attacker who can reach the upload endpoint can write files to arbitrary locations on the server, which can lead to code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:dbgpt affected < 0.6.2 fixed 0.6.2
- vendor:dbgpt db-gpt affected = 0.6.0 fixed ?

## How to check

- Run `pip show dbgpt` and confirm the installed version is below `0.6.2`.
- Check whether the knowledge upload route `knowledge/{space_name}/document/upload` is reachable from untrusted networks.

## Fix

- Upgrade the `dbgpt` PyPI package to `0.6.2` or later.
- Until upgraded, block external access to the knowledge upload endpoint.

## Timeline

- 2026-10-27T16:25:42+00:00 ghsa https://github.com/advisories/GHSA-j9g7-mqhh-9hxf
- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-10833

## From the sources

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_