Unauthenticated Path Traversal in DB-GPT by Eosphoros AI
CVE-2026-73034
9.3CRITICAL
What is CVE-2026-73034?
DB-GPT v0.8.1 is susceptible to an unauthenticated path traversal vulnerability, enabling remote attackers to exploit the Python file-upload endpoint. By injecting specially crafted directory traversal sequences into the user_id HTTP header, attackers can execute arbitrary file writes to unintended locations on the server. This includes sensitive areas such as Python startup hooks, cron directories, or agent scripts. The vulnerability poses significant risks, leading to potential remote code execution by allowing untrusted content to be executed in a privileged environment.
Affected Version(s)
DB-GPT 0 <= 0.8.1
References
EPSS Score
5% chance of being exploited in the next 30 days.
CVSS V4
Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
George Chen