eosphoros-ai db-gpt import import_flow Pfadüberschreitung

The core of this vulnerability lies in the import_flow function, specifically how it handles file imports. An attacker can craft a malicious request that includes a manipulated 'File' argument, leveraging path traversal sequences (e.g., '../') to navigate outside the intended directory. This allows them to access files that should be protected, potentially including configuration files, source code, or other sensitive data. The remote nature of the vulnerability means an attacker does not need local access to exploit it. The potential impact extends beyond simple data disclosure; an attacker could potentially modify critical system files or execute arbitrary code if the accessed files are executable.

Organizations deploying db-gpt in production environments, particularly those with publicly accessible API endpoints, are at risk. Shared hosting environments where multiple users share the same server instance are also particularly vulnerable, as a compromise of one user's instance could lead to access to other users' data. Systems using older, unpatched versions of db-gpt are most susceptible.

• python / server:

import os
import requests

url = 'http://your-db-gpt-server/api/v2/serve/awel/flow/import'

# Attempt path traversal
file_param = 'File=../../../../etc/passwd'

# Send the request
response = requests.post(url, data={'import_flow': file_param})

# Check for sensitive file content in the response
if 'root:' in response.text:
    print('Potential Path Traversal Detected!')
else:
    print('No Path Traversal Detected.')

1. 2025-06-27Disclosure

   disclosure

1. Reserviert2025-06-27
2. Veröffentlicht2025-06-27
3. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-6772 is to immediately upgrade db-gpt to version 0.7.3 or later, which contains the fix. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict file upload directories and implement strict input validation on the 'File' argument to prevent path traversal attempts. Employ a Web Application Firewall (WAF) with rules to block requests containing suspicious path traversal sequences. Monitor system logs for unusual file access patterns or attempts to access files outside of expected directories. After upgrading, verify the fix by attempting to access a file outside the intended import directory and confirming access is denied.