Skip to content
db-gptGHSA-3248-f932-c76p

DB-GPT vulnerable to Cross-Site Request Forgery

High7.1CVE-2024-10906 · Published Mar 20, 2025 · updated Jul 7, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
dbgpt
PyPI
<= 0.6.0No fix yet
Details and references

In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forgery (CSRF). An attacker can exploit this vulnerability to interact with any endpoints of the instance, even if the instance is not publicly exposed to the network.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
Severity from
GitHub (reviewed advisory)
Weakness
CWE-352
Also known as
CVE-2024-10906, PYSEC-2026-1289

More db-gpt advisories

All
DateAdvisory
Mar 202025DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
CVE-2024-10902Critical9.1no fix yet
Mar 202025DB-GPT Uncontrolled Resource Consumption vulnerability
CVE-2024-10829High7.5no fix yet
Mar 202025DB-GPT Arbitrary File Write vulnerability
CVE-2024-10901Critical9.1no fix yet
Mar 202025DB-GPT Path Traversal vulnerability
CVE-2024-10830High8.2no fix yet
Mar 202025DB-GPT Absolute Path Traversal vulnerability
CVE-2024-10831Critical9.1no fix yet
Mar 202025DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
CVE-2024-10833Critical9.1fixed in 0.6.2

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.