[错误] [dbgpt-serve] 流程包导入接口未授权远程代码执行（<=0.8.2，RCE）
作者: xld-hub创建于 2026年9月11日更新于 2026年9月11日
标签bugWaiting for reply
Additional context: When saving uploaded files, `os.path.join(temp_dir, filename)` is not sanitized.
内容来源: eosphoros-ai/DB-GPT
Additional context: When saving uploaded files, `os.path.join(temp_dir, filename)` is not sanitized.
内容来源: eosphoros-ai/DB-GPT