Unauthenticated Path Traversal in DB-GPT Leading to RCE

Executive Summary

This vulnerability is an unauthenticated path traversal flaw in DB-GPT v0.8.1 that allows remote attackers to write arbitrary files anywhere on the server. It occurs because the python file-upload endpoint uses an unvalidated user_id HTTP header to construct the upload directory. Attackers can inject directory traversal sequences (like ../) into this header to escape the intended upload directory and write files to sensitive locations such as Python startup hooks, cron directories, or agent scripts, potentially leading to remote code execution.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor HTTP requests to the DB-GPT file-upload endpoint for unusual user_id headers containing directory traversal sequences like ../ or absolute paths. Check server logs for unexpected file writes outside the intended upload directory. Use tools like curl to test the endpoint with a crafted request containing a traversal sequence in the user_id header.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to write malicious files to any location on the server without authentication. This could lead to remote code execution, system compromise, or data theft. Attackers might target critical system files like startup scripts, cron jobs, or agent configurations to gain persistent access or escalate privileges. The impact includes potential full server takeover and exposure of sensitive data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security such as GDPR and HIPAA due to unauthorized file writes and potential remote code execution. GDPR requires protection against unauthorized access and data breaches, while HIPAA mandates safeguards for protected health information. Exploitation could lead to unauthorized data access, modification, or exfiltration, resulting in regulatory penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade DB-GPT to a patched version that validates the user_id header to prevent directory traversal. If upgrading is not possible, apply the security fix from the commit e0c741bd2b5e521b128cffb3f68982dde3f7b359 which restricts user_id to alphanumeric characters and enforces path validation. Disable the file-upload endpoint if not required.

Useful 0 Not Useful 0