Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-73034: DB-GPT v0.8.1 allows attackers to write files anywhere on server
CVE-2026-73034 · published 23 days ago
Summary
The DB-GPT software has a security flaw that lets attackers upload files to any location on the server. This could allow attackers to take control of the server, so it's essential to update to a secure version. Update DB-GPT to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| eosphoros-ai | db-gpt | <= 0.8.1 |
Original advisory text
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations such as Python startup hooks, cron directories, or agent scripts, resulting in remote code execution.
Severity
9.3
Critical
CVSS 3.1: 9.8 (NVD)
CVSS 4.0: 9.3 (NVD)
Exploitation
EPSS 5%
Type
CWE-22Path Traversal
Timeline
Published11 Aug 2026
Updated1 Sep 2026
First seen11 Aug 2026
Monitor software like this
Free during beta