---
id: "CVE-2024-10902"
kind: "vulnerability"
aliases: ["CVE-2024-10902", "GHSA-3xq5-x4fj-rff7"]
title: "DB-GPT vulnerable to Arbitrary File Upload with Path Traversal"
severity: "critical"
cvss: 9.8
epss: 0.01313
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "dbgpt", "fixed": [], "affected": "<= 0.6.0", "ecosystem": "pypi"}, {"name": "dbgpt db-gpt", "fixed": [], "affected": "= 0.6.0", "ecosystem": "vendor"}]
ecosystems: ["pypi", "vendor"]
tags: ["ai-apps", "ai-tooling", "cwe-22", "cwe-73", "dbgpt", "pypi", "python", "self-hosted"]
not_affected_if: ["dbgpt-above-0.6.0"]
published_at: "2025-03-20T10:15:21+00:00"
first_seen_at: "2026-10-27T16:25:43+00:00"
updated_at: "2026-10-27T16:33:07+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-3xq5-x4fj-rff7", "first_seen_at": "2026-10-27T16:25:43+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10902", "first_seen_at": "2026-10-27T16:33:07+00:00"}]
---

# DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

DB-GPT v0.6.0 exposes POST /v1/personal/agent/upload, which lets an attacker write files to any location on the server through path traversal. Writing a malicious __init__.py into the Python site-packages directory can lead to remote code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:dbgpt affected <= 0.6.0 fixed ?
- vendor:dbgpt db-gpt affected = 0.6.0 fixed ?

## How to check

- Check the installed version with `pip show dbgpt` and see whether it is `0.6.0` or earlier.
- Look for the route `/v1/personal/agent/upload` in the deployed DB-GPT server.

## Fix

- Upgrade the `dbgpt` package to a version later than `0.6.0`; the fixed version is unknown from the sources.
- Until patched, block external access to the DB-GPT web API.

## Timeline

- 2026-10-27T16:25:43+00:00 ghsa https://github.com/advisories/GHSA-3xq5-x4fj-rff7
- 2026-10-27T16:33:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-10902

## From the sources

In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python's `/site-packages/` directory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_