CVE-2026-73034

Name of the Vulnerable Software and Affected Versions DB-GPT version 0.8.1

Description An unauthenticated path traversal issue exists in the Python file-upload endpoint. Remote attackers can write arbitrary files to any location on the server by injecting directory traversal sequences into the user id HTTP header. By sending a crafted multipart upload request with a poisoned user id header, an attacker can escape the intended upload directory and write content to sensitive locations, such as Python startup hooks, cron directories, or agent scripts, which can lead to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.