CVE-2024-10906 Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt

High 7.1 Published 20 Mar 2025 Updated 20 Mar 2025

An attacker can perform Cross-Site Request Forgery attacks against DB-GPT server endpoints due to overly permissive CORS settings.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2024-10906?

CVE-2024-10906 is a high-severity vulnerability in eosphoros-ai/db-gpt, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forgery (CSRF). An attacker can exploit this vulnerability to interact with any endpoints of the instance, even if the instance is not publicly exposed to the network.

Weakness: CWE-352

Which versions are affected by CVE-2024-10906?

3 open source packages ship an affected version, including dbgpt. It affects 1 product.

Package	Affected	Fixed in
`dbgpt` PyPI	All versions to `0.6.0`	None
`dbgpt` PyPI	All versions to `0.6.0`	None
`dbgpt` PyPI	All versions to `0.6.0`	None

Products include Dbgpt Db-Gpt.

How do I fix CVE-2024-10906?

No fix has been published for CVE-2024-10906 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-10906 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-10906 exists.

Sources

Also known as GHSA-3248-f932-c76p, PYSEC-2026-1289.