CVE-2026-51863 Details
Description
DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.
A directory traversal vulnerability has been identified in DB-GPT versions 0.7.5 and 0.8.0. The issue resides in the 'use_example_file' function of the 'examples_api.py' file. This vulnerability allows remote attackers to write files outside the designated workspace or storage boundaries. The problem arises because, while the 'example_id' parameter is validated against a whitelist, the corresponding 'name' field in the 'EXAMPLE_FILES' dictionary is not. If an attacker can manipulate this dictionary, they could introduce path traversal sequences to exploit the vulnerability.
Users can update to DB-GPT version 0.8.1, which includes a fix for this vulnerability by validating example file names to prevent path traversal.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 29, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/Ro1ME/8be4e1bad6c9d7a777ec7638b1192dee | CISA-ADP | ExploitTechnical Description |
| https://github.com/eosphoros-ai/DB-GPT/issues/3028 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://gist.github.com/Ro1ME/8be4e1bad6c9d7a777ec7638b1192dee | [email protected] | ExploitTechnical Description |
| https://github.com/eosphoros-ai/DB-GPT/issues/3028 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| DB-GPT | 0.7.5 (semver) 0.8.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 29, 2026 | New CVE Received | [email protected] |