Cyber Resilience

CVE-2025-6772

MediumPublic PoC

Published: 27 June 2025

Published
27 June 2025
Modified
29 April 2026
KEV Added
—
Patch
—
CVSS Score v4 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0146 81.3th percentile
Risk Priority 12 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-6772 is a medium-severity Path Traversal (CWE-22) vulnerability in Dbgpt Db-Gpt. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data from Local System (T1005); ranked in the top 18.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as LLM Application Platforms; in the Supply Chain and Deployment risk domain.

Deeper analysis

CVE-2025-6772 is a path traversal vulnerability in eosphoros-ai db-gpt up to version 0.7.2, specifically in the import_flow function of the endpoint /api/v2/serve/awel/flow/import. The flaw arises from insufficient validation of the File argument, allowing directory traversal via CWE-22.

The vulnerability can be exploited remotely by an unauthenticated attacker who supplies a crafted File argument, resulting in limited impacts to confidentiality, integrity, and availability as reflected in its CVSS 4.0 score of 5.5. Public exploit details have been disclosed.

The associated EPSS score has remained flat at 0.0146 with no material rise after disclosure. References point to a GitHub issue and Vuldb entries but contain no mitigation or patch guidance.

EU & UK References

Vulnerability details

A vulnerability was found in eosphoros-ai db-gpt up to 0.7.2. It has been classified as critical. Affected is the function import_flow of the file /api/v2/serve/awel/flow/import. The manipulation of the argument File leads to path traversal. It is possible to launch…

more

the attack remotely. The exploit has been disclosed to the public and may be used.

CWE(s)
CWE-22

AI Security AnalysisAI

AI Category
LLM Application Platforms
Risk Domain
Supply Chain and Deployment
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Matched keywords: ai, gpt

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
attack.mitre.org →
T1083 File and Directory Discovery Discovery
Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
attack.mitre.org →
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Path traversal vulnerability in public-facing API (/api/v2/serve/awel/flow/import) enables remote unauthenticated arbitrary file read, facilitating exploitation of public-facing application (T1190), data collection from local system (T1005), and file/directory discovery (T1083).

Affected Assets

dbgpt
db-gpt
≤ 0.7.2

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SI-10 Information Input Validation
addresses: CWE-22

Validates pathnames and filenames to prevent traversal outside intended directories.

References