The vulnerability allows an attacker to write arbitrary files to the filesystem because the uploaded skill filename is used directly to build the destination path without proper validation. A malicious filename such as ../../../../tmp/malicious.py defeats the intended upload directory and the file is written without restriction. The uploaded code can be any content, including a Python module, and when the application later imports it, the attacker achieves code execution within the server process. This flaw is a classic path traversal (CWE-22) that grants full control of the application environment.

The flaw exists in the DB-GPT application version 0.8.0 from eosphoros-ai. Only this release is affected; later releases, such as v0.8.1, have applied a fix.

With a CVSS score of 9.3, the vulnerability is considered critical. No EPSS score is available, but the absence of authentication requirements means an attacker can exploit the flaw remotely and immediately. The endpoint is accessible without credentials, and the server process has ordinary file-write privileges, making arbitrary file creation and subsequent code execution straightforward. The flaw is not listed in the CISA KEV catalog, but its high severity and lack of protection make it an urgent risk.