DB-GPT 0.8.0 contains a directory traversal flaw in the skill_upload endpoint that allows a remote attacker to write files outside the intended workspace or storage boundary. The flaw permits the placement of arbitrary files, which could override configuration files, inject malicious payloads, and potentially lead to remote code execution or data compromise.

The vulnerability affects deployments of DB-GPT version 0.8.0. No specific vendor or product list is provided, indicating that any instance of this open-source tool using the affected version is at risk.

The flaw is exploitable via a documented path in the source code. The CVSS score of 9.1 indicates a critical severity, and the EPSS score of < 1% suggests that widespread exploitation is unlikely but the vulnerability remains a serious risk. The vulnerability is not listed in CISA’s KEV catalog, but the ability to write arbitrary files poses a significant risk if the application executes or trusts uploaded content. Attackers can use the validated exploitation route unless mitigations such as disabling the upload endpoint or applying the official patch are enforced.