CyberRota Analysis
AI-GeneratedDB-GPT v0.8.1 is vulnerable to an unauthenticated path traversal flaw that enables remote attackers to exploit the user_id HTTP header, allowing them to write arbitrary files to any location on the server. This can lead to remote code execution, posing a critical risk to the integrity and security of affected systems. Organizations using this version should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations such as Python startup hooks, cron directories, or agent scripts, resulting in remote code execution.