CVE-2026-47669

Name of the Vulnerable Software and Affected Versions DbGate versions prior to 7.1.9

Description DbGate contains a Zip Slip flaw where the unzipDirectory() function fails to validate that extracted file paths remain within the intended output directory. An attacker can use a malicious ZIP archive containing ../ sequences to write files to arbitrary locations on the filesystem. In default Docker deployments, the application runs as root and the none authentication provider allows the acquisition of JWT tokens without credentials via the POST /auth/login endpoint, enabling network-adjacent attackers to achieve arbitrary file write and remote code execution. The archive controller also lacks permission checks and path traversal protection across its endpoints, including POST /api/archive/unzip.

Recommendations Update DbGate to version 7.1.9. As a temporary mitigation, restrict access to the POST /api/archive/unzip endpoint and avoid using the unzipDirectory() function until the update is applied.