CVE-2025-6772
📋 TL;DR
This critical vulnerability in eosphoros-ai DB-GPT allows remote attackers to perform path traversal attacks via the import_flow function's File parameter. Attackers can potentially read, write, or delete arbitrary files on the server. All users running DB-GPT versions up to 0.7.2 are affected.
💻 Affected Systems
- eosphoros-ai DB-GPT
📦 What is this software?
Db Gpt by Dbgpt
⚠️ Risk & Real-World Impact
Worst Case
Complete system compromise through arbitrary file write leading to remote code execution, data exfiltration, or system destruction.
Likely Case
Unauthorized file access leading to sensitive information disclosure, configuration file manipulation, or partial system compromise.
If Mitigated
Limited impact with proper file system permissions, but still potential for information disclosure from accessible files.
🎯 Exploit Status
Exploit details are publicly disclosed in GitHub issue #2774, making weaponization straightforward.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 0.7.3 or later
Vendor Advisory: https://github.com/eosphoros-ai/DB-GPT/issues/2774
Restart Required: Yes
Instructions:
1. Update DB-GPT to version 0.7.3 or later using pip: pip install --upgrade db-gpt==0.7.3
2. Restart the DB-GPT service
3. Verify the fix by checking the version
🔧 Temporary Workarounds
API Endpoint Restriction
allBlock or restrict access to the vulnerable /api/v2/serve/awel/flow/import endpoint
# Use web server configuration (nginx example)
location /api/v2/serve/awel/flow/import {
deny all;
}
File Upload Validation
allImplement strict file path validation and sanitization for the import_flow function
# Python example for path validation
import os
def safe_path(file_path):
base_dir = '/safe/directory'
abs_path = os.path.abspath(os.path.join(base_dir, file_path))
if not abs_path.startswith(base_dir):
raise ValueError('Path traversal attempt detected')
return abs_path
🧯 If You Can't Patch
- Implement strict network segmentation to isolate DB-GPT instances from sensitive systems
- Deploy web application firewall (WAF) rules to detect and block path traversal patterns
🔍 How to Verify
Check if Vulnerable:
Check if DB-GPT version is 0.7.2 or earlier and the /api/v2/serve/awel/flow/import endpoint is accessibleCheck Version:
pip show db-gpt | grep VersionVerify Fix Applied:
Confirm DB-GPT version is 0.7.3 or later and test the import endpoint with path traversal attempts📡 Detection & Monitoring
Log Indicators:
- Unusual file access patterns in application logs
- Multiple failed import attempts with suspicious file paths
- Access to files outside expected directories
Network Indicators:
- HTTP requests to /api/v2/serve/awel/flow/import with ../ patterns in parameters
- Unusual file download patterns from the DB-GPT server
SIEM Query:
source="db-gpt-logs" AND (uri_path="/api/v2/serve/awel/flow/import" AND (param=".." OR param="%2e%2e"))