CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
Remote attackers can write arbitrary files via path traversal in skill uploads, leading to code execution due to missing authentication and path validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-80104?
CVE-2026-80104 is a critical path traversal vulnerability in eosphoros-ai DB-GPT, published on 25 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py takes file.filename as given and writes the request body to upload_dir / filename. A path composed with that operator discards the left operand when the right one is absolute and follows parent references otherwise, so a filename such as ../../../tmp/x or /tmp/x resolves outside the intended directory; nothing canonicalises the result, checks that it remains under the upload root, or prevents a .py suffix. The route's only dependency is get_user_from_headers in dbgpt_serve/utils/auth.py, which returns a request carrying the admin role whether or not a user_id header is supplied, so the endpoint is reachable without credentials. A remote attacker holding no account can therefore write attacker-controlled bytes to any path the server process can write, place a new Python module inside the application package or replace one the application already imports, and obtain code execution in the server process when that module is next imported.
Weakness: CWE-22
Which versions are affected by CVE-2026-80104?
How do I fix CVE-2026-80104?
No fix has been published for CVE-2026-80104 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-80104 being exploited?
There is no known exploitation of CVE-2026-80104 in the wild and no public exploit code.
Sources
Also known as GHSA-x75h-xjfp-qrh8.