CVE-2025-0452 Arbitrary File Deletion in eosphoros-ai/DB-GPT

High 8.2 Published 20 Mar 2025 Updated 20 Mar 2025

Attackers can delete arbitrary files on Windows hosts via path traversal in the agent hub update endpoint of DB-GPT.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-0452?

CVE-2025-0452 is a high-severity path traversal vulnerability in eosphoros-ai/db-gpt, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vulnerability allows attackers to delete any files on the host system by manipulating the 'plugin_repo_name' variable.

Weakness: CWE-73

Which versions are affected by CVE-2025-0452?

It affects 1 product.

Products include Dbgpt Db-Gpt.

How do I fix CVE-2025-0452?

No fix has been published for CVE-2025-0452 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-0452 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-0452 exists.

Sources

Also known as GHSA-h4p8-798h-26f4.