CVE-2026-80104: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in eosphoros-ai DB-GPT

The vulnerability arises because the DB-GPT skill_upload endpoint uses the multipart filename directly to build the destination path without canonicalizing or validating it against the upload directory. The path construction allows absolute paths or parent directory references (e.g., ../../../tmp/x), enabling files to be written outside the intended directory. Additionally, the endpoint's authentication is flawed: the get_user_from_headers function grants admin role access even without user credentials, making the endpoint accessible to unauthenticated attackers. Consequently, an attacker can write arbitrary files, including malicious Python modules, which the server may later import and execute, resulting in remote code execution.

An unauthenticated remote attacker can write arbitrary files anywhere the server process has write permissions, including overwriting or adding Python modules in the application package. This can lead to full remote code execution within the server process, compromising the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable endpoint and implement input validation to ensure uploaded filenames cannot escape the designated upload directory. Additionally, fix the authentication logic to properly verify user credentials before granting admin privileges.