EUVD-2025-19420Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network API endpoint, no user interaction; path traversal enables limited file read/write with no meaningful availability impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
Path traversal in DB-GPT versions 0.7.0 through 0.7.2 allows unauthenticated remote attackers to read or write files outside the intended directory by supplying crafted path sequences in the File argument of the AWEL flow import endpoint at /api/v2/serve/awel/flow/import. A proof-of-concept has been publicly disclosed via the eosphoros-ai GitHub issue tracker, materially lowering the bar for opportunistic exploitation against internet-exposed instances. No vendor-released patched version has been confirmed at time of analysis, leaving affected deployments without an official upstream fix.
Technical ContextAI
DB-GPT is an open-source AI agent and LLM-to-database framework developed by eosphoros-ai, featuring AWEL (Agentic Workflow Expression Language) for building pipeline workflows. The vulnerable component is the import_flow function, which handles multipart file uploads at the REST API endpoint /api/v2/serve/awel/flow/import. The root cause is CWE-22 (Path Traversal): the application fails to sanitize or canonicalize the caller-supplied File parameter before using it to locate or write files on the server filesystem, allowing directory traversal sequences such as ../ or absolute path injections to escape the intended storage directory and access arbitrary server-side paths. The affected CPE is cpe:2.3:a:dbgpt:db-gpt:*:*:*:*:*:*:*:* covering all enumerated versions 0.7.0, 0.7.1, and 0.7.2.
RemediationAI
No vendor-released patched version has been identified at time of analysis; the issue was reported via a GitHub issue (https://github.com/eosphoros-ai/DB-GPT/issues/2774) but no tagged upstream release addressing this flaw appears in the available references. Organizations should monitor the eosphoros-ai GitHub repository and VulDB advisory (https://vuldb.com/?id.314088) for patch availability. As an immediate compensating control, restrict or block external access to the /api/v2/serve/awel/flow/import endpoint using a reverse proxy or firewall, noting that this disables the AWEL flow import feature for all external users. If DB-GPT does not need to be internet-facing, binding the service to a loopback or internal network interface eliminates the remote attack vector entirely. Ensuring the DB-GPT process runs under a least-privilege account with write access confined to a chrooted or container-isolated directory will limit the impact of any exploitation if blocking network access is not immediately feasible.
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Uplo
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queri
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. Rated critical sev
In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. Rated c
eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file
A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/de
eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/up
In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance
SQL injection in eosphoros-ai db-gpt versions up to 0.7.5 allows unauthenticated remote attackers to manipulate the /api
Unauthenticated arbitrary file write in DB-GPT 0.8.0 lets remote attackers achieve remote code execution through the ski
An unrestricted file upload vulnerability exists in eosphoros-ai DB-GPT versions up to 0.7.5 within the module_plugin.re
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL que
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today