Directory Traversal Vulnerability in DbGate Database Manager
CVE-2026-47669

9.3CRITICAL

Key Information:

Vendor

Dbgate

Status
Dbgate
Vendor
CVE Published:
23 July 2026

What is CVE-2026-47669?

DbGate, a cross-platform database management tool, suffers from a directory traversal vulnerability in versions 7.1.8 and earlier. Specifically, the issue lies in the unzipDirectory() function, which fails to properly validate file paths of extracted files, allowing malicious ZIP archives containing ../ entries to write files outside the intended output directory. This could lead to unauthorized file system access, especially since the default Docker deployment runs DbGate with root privileges. Additionally, the none authentication provider can issue JWT tokens without valid credentials, making it susceptible to exploitation by any attacker with network access. The vulnerability has been resolved in version 7.1.9.

Affected Version(s)

dbgate < 7.1.9

References

https://github.com/dbgate/dbgate/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/dbgate/dbgate/releases/tag/v7.1.9
x_refsource_MISC

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.