9.8Kritisch
CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
Beschreibung
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
Schwachstellentyp (CWE):
CWE-306
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| dbgpt | db-gpt | ≤ 0.8.2 | |
| eosphoros-ai | DB-GPT | ≤ 0.8.2 |
Referenzen und Patches
- Lasso.security Advisory technical-descriptionexploit
- https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-serve/src… technical-description
- https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-app/src/d… technical-description
- VulnCheck Advisory: DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent third-party-advisory