Unauthenticated Path Traversal in DB-GPT by Eosphoros AI

CVE-2026-73034

What is CVE-2026-73034?

DB-GPT v0.8.1 is susceptible to an unauthenticated path traversal vulnerability, enabling remote attackers to exploit the Python file-upload endpoint. By injecting specially crafted directory traversal sequences into the user_id HTTP header, attackers can execute arbitrary file writes to unintended locations on the server. This includes sensitive areas such as Python startup hooks, cron directories, or agent scripts. The vulnerability poses significant risks, leading to potential remote code execution by allowing untrusted content to be executed in a privileged environment.

References