{"id":"CVE-2026-51863","title":"DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129)","summary":"DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvssSource":"adp","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-11-02T16:25:02.875749Z"},"exploitAvailable":true,"published":"2026-10-29","updated":"2026-11-02","sourceUpdated":"2026-11-02T16:25:40.938Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-51863","references":[{"url":"https://github.com/eosphoros-ai/DB-GPT/issues/3028"},{"url":"https://gist.github.com/Ro1ME/8be4e1bad6c9d7a777ec7638b1192dee"}],"tags":["cve.org","exploit-available"],"epss":0.00806,"epssPercentile":0.57038,"ingestedAt":"2026-11-01T22:02:41.002Z","slug":"CVE-2026-51863","body":"## Overview\n\nDB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":233444,"id":"CVE-2026-51863","ts":1793907107761,"field":"exploit_available","old":"false","new":"true"},{"seq":233443,"id":"CVE-2026-51863","ts":1793907107761,"field":"cvss","old":null,"new":"9.1"},{"seq":233442,"id":"CVE-2026-51863","ts":1793907107761,"field":"severity","old":"none","new":"critical"}]}