Live › vulnerability › CVE-2024-10901
Go to dashboardDB-GPT, an AI framework for database chat, exposes a web API endpoint that runs arbitrary SQL without access control. An attacker can use it to write files anywhere the service can write, which can lead to remote code execution by planting a module such as __init__.py in the Python site-packages directory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:30 UTC, 0h before NVD. All times on this page are UTC.
Teams running DB-GPT version 0.6.3 or earlier with its web API reachable by users or networks they do not fully trust. The endpoint accepts requests without authentication, so any deployment exposed beyond a trusted network is at risk. Deployments that are not running the web API or keep it behind access controls are less exposed; the sources do not say more.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| dbgpt | pypi | <= 0.6.3 | – |
| dbgpt db-gpt | vendor | = 0.6.0 | – |
pip show dbgpt and check whether the installed version is 0.6.3 or earlier.POST /api/v1/editor/chart/run responds on your deployment.dbgpt package to a version later than 0.6.3; the fixed version is unknown from the sources./api/v1/editor/chart/run and restrict the service to trusted networks.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In eosphoros-ai/db-gpt version v0.6.3 and earlier, the web API POST /api/v1/editor/chart/run allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE) by writing malicious files such as __init__.py in the Python's /site-packages/ directory.
This page as .md · .json · in your agent: get_signal("CVE-2024-10901")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.