DbGate contains a path traversal flaw in the fs.readFile function of the files-style Endpoint. An attacker can manipulate the filePath or uri request parameter to read arbitrary files on the server, potentially exposing confidential data such as credentials, configuration files, or source code. The flaw is identified as CWE-22 and does not provide a direct code‑execution vector, but it allows a remote attacker to compromise data confidentiality and integrity.

All DbGate installations up to version 7.2.5 and the 7.3.1‑premium‑beta.1 release are vulnerable. The issue resides in the files‑style Endpoint component and affects any deployment that exposes this API endpoint to external network traffic. The exploit can target any operating system the application runs on as long as the attacker can reach the endpoint and the target file resides within the file system accessible by the application process.

The vulnerability has a CVSS score of 5.3, classifying it as moderate. A remote attacker sends a crafted HTTP request to the files-style Endpoint, supplying a filePath or uri that includes traversal sequences; if the file system permits it, the attacker can read any visible file. The EPSS score is not available, so the likelihood of exploitation is unknown from publicly available data. The flaw is not listed in the CISA KEV catalog. No privilege escalation is required beyond the permissions of the application process, but the risk is amplified if the application runs with elevated privileges or if sensitive files are stored in directories reachable via the endpoint.