https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-51458.htmlhttps://patchthecve.com/cve/CVE-2025-51458.htmlWed, 17 Jun 2026 09:35:36 +0000MEDIUM 6.5: SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.https://patchthecve.com/cve/CVE-2025-51459.htmlhttps://patchthecve.com/cve/CVE-2025-51459.htmlWed, 17 Jun 2026 09:35:36 +0000MEDIUM 6.5: File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with plugin_hub._sanitize_filename and plugins_util.scan_plhttps://patchthecve.com/cve/CVE-2025-6772.htmlhttps://patchthecve.com/cve/CVE-2025-6772.htmlWed, 17 Jun 2026 10:02:32 +0000HIGH 7.3: A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-0452.htmlhttps://patchthecve.com/cve/CVE-2025-0452.htmlWed, 17 Jun 2026 08:26:30 +0000HIGH 8.2: eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vulnerability allows attackers to delete anhttps://patchthecve.com/cve/CVE-2024-10906.htmlhttps://patchthecve.com/cve/CVE-2024-10906.htmlWed, 17 Jun 2026 06:56:40 +0000HIGH 8.1: In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Requhttps://patchthecve.com/cve/CVE-2024-10902.htmlhttps://patchthecve.com/cve/CVE-2024-10902.htmlWed, 17 Jun 2026 06:56:39 +0000CRITICAL 9.8: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability inchttps://patchthecve.com/cve/CVE-2024-10901.htmlhttps://patchthecve.com/cve/CVE-2024-10901.htmlWed, 17 Jun 2026 06:56:39 +0000CRITICAL 9.8: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file systehttps://patchthecve.com/cve/CVE-2024-10835.htmlhttps://patchthecve.com/cve/CVE-2024-10835.htmlWed, 17 Jun 2026 06:56:32 +0000CRITICAL 9.8: In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write using DuckDB SQL, enabling them to write arbitrary files to the victhttps://patchthecve.com/cve/CVE-2024-10834.htmlhttps://patchthecve.com/cve/CVE-2024-10834.htmlWed, 17 Jun 2026 06:56:32 +0000CRITICAL 9.1: eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to `os.path.join`, enabling an attacker to write files to arbitrary locations on the target server. Thishttps://patchthecve.com/cve/CVE-2024-10833.htmlhttps://patchthecve.com/cve/CVE-2024-10833.htmlWed, 17 Jun 2026 06:56:31 +0000CRITICAL 9.1: eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises behttps://patchthecve.com/cve/CVE-2024-10831.htmlhttps://patchthecve.com/cve/CVE-2024-10831.htmlWed, 17 Jun 2026 06:56:31 +0000CRITICAL 9.1: In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters arehttps://patchthecve.com/cve/CVE-2024-10830.htmlhttps://patchthecve.com/cve/CVE-2024-10830.htmlWed, 17 Jun 2026 06:56:31 +0000HIGH 8.2: A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. This vulnerability allows an attacker to delete any file on the server by manipulating the `file_key` parameter. The `file_key` parameter is not properly sanitized, enablinghttps://patchthecve.com/cve/CVE-2024-10829.htmlhttps://patchthecve.com/cve/CVE-2024-10829.htmlWed, 17 Jun 2026 06:56:31 +0000HIGH 7.5: A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading