{"id":"CVE-2026-51863","kind":"vulnerability","aliases":["CVE-2026-51863"],"related":[],"title":"DB-GPT: directory traversal lets remote users write files outside workspace","description":"DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.","summary":"DB-GPT versions 0.7.5 and 0.8.0 have a directory traversal flaw in the use_example_file function of its examples API. A remote attacker can write files outside the intended workspace or storage directory.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"DB-GPT","fixed":[],"affected":"0.7.5, 0.8.0","ecosystem":"pip"}],"ecosystems":[],"tags":["ai-tooling","db-gpt","python","self-hosted"],"not_affected_if":["api-not-exposed","other-versions"],"how_to_check":"- Check the installed DB-GPT version (`dbgpt --version` or the package version in `packages/dbgpt-app`) and see whether it is `0.7.5` or `0.8.0`.\n- Look at `packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py` around line 129 to confirm the file-path handling in `use_example_file`.","fix":null,"status":"open","published_at":"2026-10-29T18:17:32+00:00","first_seen_at":"2026-10-29T18:26:33+00:00","triaged_at":"2026-10-29T18:28:53+00:00","updated_at":"2026-10-29T18:30:51+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-29T18:28:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"DB-GPT: directory traversal lets remote users write files outside workspace","impact":"high","summary":"DB-GPT versions 0.7.5 and 0.8.0 have a directory traversal flaw in the use_example_file function of its examples API. A remote attacker can write files outside the intended workspace or storage directory.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["db-gpt","python","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"remote attacker writes arbitrary files on the server","analyst_note":"Check the NVD entry and upstream DB-GPT advisory for fixed version, authentication requirement, and whether the endpoint is reachable by default.","how_to_check":"- Check the installed DB-GPT version (`dbgpt --version` or the package version in `packages/dbgpt-app`) and see whether it is `0.7.5` or `0.8.0`.\n- Look at `packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py` around line 129 to confirm the file-path handling in `use_example_file`.","plain_action":"","needs_analyst":true,"not_affected_if":["other-versions","api-not-exposed"],"who_is_affected":"DB-GPT deployments running the affected versions that expose the OpenAPI examples endpoint to the network. The sources do not say which configurations are reachable by default, nor whether authentication gates the endpoint. Teams on other versions or with the API kept off the network are likely not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000711,"input_tokens":4123,"output_tokens":598,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Check the NVD entry and upstream DB-GPT advisory for fixed version, authentication requirement, and whether the endpoint is reachable by default.","search":"'-2026':14A,17A '-51863':15A,18A '0.7.5':36B '0.8.0':38B,72C '129':81C 'ai':23B 'ai-tool':22B 'api':53B 'attack':56B,84C 'boundari':100C 'contain':73C 'cve':13A,16A 'db':2A,20A,26B,33B,68C 'db-gpt':1A,19A,25B,32B,67C 'directori':4A,41B,66B,74C 'exampl':47B,52B,78C 'exploit':89C 'file':10A,48B,59B,79C,93C 'flaw':43B 'function':49B 'gpt':3A,21A,27B,34B,69C 'host':31B 'intend':62B,96C 'let':6A 'outsid':11A,60B,94C 'packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py':80C 'path':90C 'python':28B 'remot':7A,55B,83C 'self':30B 'self-host':29B 'storag':65B,99C 'tool':24B 'travers':5A,42B,75C 'use':46B,77C,86C 'user':8A 'v0.7.5':70C 'valid':88C 'version':35B 'workspac':12A,63B,97C 'write':9A,58B,92C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted DB-GPT 0.7.5 and 0.8.0 that expose the /api/v1/examples/use endpoint. Per the reporter, the traversal needs a malicious name entry in the EXAMPLE_FILES table, which a remote caller cannot set directly, so real-world risk is lower than the CVE text suggests. Teams on other versions, or with DB-GPT not reachable from untrusted networks, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T18:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-51863","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-51863","severity":null,"published_at":"2026-10-29T18:17:32+00:00","modified_at":"2026-10-29T18:17:32+00:00","first_seen_at":"2026-10-29T18:26:33+00:00","fetched_at":"2026-10-29T18:26:33+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-51863:1094","url":null,"severity":null,"published_at":"2026-10-29T18:30:51+00:00","modified_at":"2026-10-29T18:30:51+00:00","first_seen_at":"2026-10-29T18:30:51+00:00","fetched_at":"2026-10-29T18:30:51+00:00","note":"Reporter issue #3028 (closed; referenced by PR #3066 'validate example file names') shows the traversal is via example['name'] from the EXAMPLE_FILES dict, not a request parameter; endpoint POST /api/v1/examples/use needs the user_id header dependency (which sibling CVEs say is a mock granting admin). The issue's PoC requires tampering with EXAMPLE_FILES, so practical exploitability looks low. No vendor advisory or fixed release found; PR page unreadable, so the fix version is unknown. Severity left unchanged. Settle it by checking whether PR #3066 is merged and which release contains it."}],"documents":[{"id":18583,"url":"https://github.com/eosphoros-ai/DB-GPT/issues/3028","title":"DB-GPT #3028 Path Traversal in use_example_file (closed, ref PR #3066)","kind":"issue","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":18584,"url":"https://releasealert.dev/github/eosphoros-ai/DB-GPT/cves","title":"DB-GPT CVE history (Release Alert)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}