---
id: "CVE-2024-10901"
kind: "vulnerability"
aliases: ["CVE-2024-10901", "GHSA-7gj6-22m4-qfhx"]
title: "DB-GPT Arbitrary File Write vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.01095
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "dbgpt", "fixed": [], "affected": "<= 0.6.3", "ecosystem": "pypi"}, {"name": "dbgpt db-gpt", "fixed": [], "affected": "= 0.6.0", "ecosystem": "vendor"}]
ecosystems: ["pypi", "vendor"]
tags: ["ai-tooling", "cwe-434", "cwe-89", "dbgpt", "python", "self-hosted"]
not_affected_if: ["auth-required", "managed-hosting"]
published_at: "2025-03-20T10:15:20+00:00"
first_seen_at: "2026-10-27T16:30:45+00:00"
updated_at: "2026-10-27T16:33:07+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-7gj6-22m4-qfhx", "first_seen_at": "2026-10-27T16:30:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10901", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# DB-GPT Arbitrary File Write vulnerability

DB-GPT, an AI framework for database chat, exposes a web API endpoint that runs arbitrary SQL without access control. An attacker can use it to write files anywhere the service can write, which can lead to remote code execution by planting a module such as __init__.py in the Python site-packages directory.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:dbgpt affected <= 0.6.3 fixed ?
- vendor:dbgpt db-gpt affected = 0.6.0 fixed ?

## How to check

- Run `pip show dbgpt` and check whether the installed version is `0.6.3` or earlier.
- Check whether the web API is reachable from untrusted networks and whether `POST /api/v1/editor/chart/run` responds on your deployment.

## Fix

- Upgrade the `dbgpt` package to a version later than `0.6.3`; the fixed version is unknown from the sources.
- Until patched, block external access to `/api/v1/editor/chart/run` and restrict the service to trusted networks.

## Timeline

- 2026-10-27T16:30:45+00:00 ghsa https://github.com/advisories/GHSA-7gj6-22m4-qfhx
- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-10901

## From the sources

In eosphoros-ai/db-gpt version v0.6.3 and earlier, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE) by writing malicious files such as `__init__.py` in the Python's `/site-packages/` directory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_