High severity · published Jun 27, 2025
CVE-2025-6772
eosphoros-ai db-gpt import import_flow path traversal
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
db-gpt · eosphoros-ai
0.7.0; 0.7.1; 0.7.2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6772
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6772
Exploit
https://github.com/eosphoros-ai/DB-GPT/issues/2774
Permissions Required
https://vuldb.com/?ctiid.314088
Third Party Advisory
https://vuldb.com/?id.314088
Third Party Advisory
https://vuldb.com/?submit.601028
More from db-gpt
9.8
CVE-2026-77933
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
9.8
CVE-2026-77932
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
9.8
CVE-2026-80104
DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
9.8
CVE-2026-73034
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
7.3
CVE-2026-4504
eosphoros-ai db-gpt Incomplete Fix editor sql injection