CVE-2026-80104

Received Received - Intake

Path Traversal in DB-GPT Skill Upload

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: VulnCheck

Description

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py takes file.filename as given and writes the request body to upload_dir / filename. A path composed with that operator discards the left operand when the right one is absolute and follows parent references otherwise, so a filename such as ../../../tmp/x or /tmp/x resolves outside the intended directory; nothing canonicalises the result, checks that it remains under the upload root, or prevents a .py suffix. The route's only dependency is get_user_from_headers in dbgpt_serve/utils/auth.py, which returns a request carrying the admin role whether or not a user_id header is supplied, so the endpoint is reachable without credentials. A remote attacker holding no account can therefore write attacker-controlled bytes to any path the server process can write, place a new Python module inside the application package or replace one the application already imports, and obtain code execution in the server process when that module is next imported.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-80104

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to upload a file with a specially crafted filename that escapes the intended upload directory. The attacker can then write arbitrary files to any location the server process can access, including replacing Python modules used by the application. This leads to remote code execution when the modified module is imported.

Impact Analysis

An attacker could gain full control of the server by executing arbitrary code. This could lead to data theft, system compromise, or disruption of services. Since the endpoint is accessible without authentication, any remote attacker can exploit it.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security, such as GDPR's integrity and confidentiality principles or HIPAA's security rule. It enables unauthorized access and modification of sensitive data, leading to potential breaches.

Mitigation Strategies

Immediately restrict access to the skill_upload endpoint by implementing proper authentication and authorization checks. Ensure the upload directory is isolated and cannot be escaped. Validate and sanitize all filenames to prevent path traversal. Monitor for unauthorized file writes or module imports in the application directory.

Hi! I’m here to help you understand CVE-2026-80104. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70