CVE-2025-0452 — HIGH (8.2) — White Hats Nepal

Vulnerability Description

eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vulnerability allows attackers to delete any files on the host system by manipulating the 'plugin_repo_name' variable.

CVSS Score

8.2

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

HIGH

Affected Products

Vendor	Product	Versions
Dbgpt	Db-Gpt	0.6.1

Related Weaknesses (CWE)

CWE-73

References

https://huntr.com/bounties/7e854343-3d61-47d4-ad41-c4d2f356a54aExploitThird Party Advisory

FAQ

What is CVE-2025-0452?

CVE-2025-0452 is a vulnerability with a CVSS score of 8.2 (HIGH). eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, whic...

How severe is CVE-2025-0452?

CVE-2025-0452 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-0452?

Check the references section above for vendor advisories and patch information. Affected products include: Dbgpt Db-Gpt.