Description
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
Published: 2026-10-20
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

Unrestricted execution of arbitrary Python or bash code as root within the web server container is possible because the /api/v1/chat/react-agent endpoint relies on a mock function that grants every caller an admin role. Prompt templates designed for the ReAct agent can trigger the unsandboxed code_interpreter or shell_interpreter tools, allowing an unauthenticated attacker to run arbitrary commands with full container privileges, including connecting to the bundled database using its default credentials. This enables compromise of the entire application environment and any data stored in the database.

Affected Systems

The vulnerability affects the eosphoros-ai DB-GPT application, versions through 0.8.2. All deployments of DB-GPT at or below 0.8.2 are susceptible; newer releases are not referenced as affected.

Risk and Exploitability

The CVSS score of 9.3 reflects high severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, but the lack of authentication combined with the ability to run arbitrary code makes exploitation highly likely in a real‑world setting. The attack vector is inferred to be an unauthenticated HTTP request to the /api/v1/chat/react-agent endpoint, as the mock authentication bypass satisfies the tool access controls.

Generated by OpenCVE AI on October 20, 2026 at 11:32 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade DB-GPT to the latest released version that has patched the authentication logic; if an official fix is not yet available, move to a newer stable release.
  • Prevent unauthenticated access to /api/v1/chat/react-agent by configuring a reverse‑proxy or firewall rule that blocks or requires authentication for this endpoint.
  • If the database is accessed by the container, change the default credentials immediately to prevent credential‑based exploitation.

Generated by OpenCVE AI on October 20, 2026 at 11:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Eosphoros-ai
Eosphoros-ai db-gpt
Vendors & Products Eosphoros-ai
Eosphoros-ai db-gpt

Tue, 20 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Description DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
Title DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
First Time appeared Dbgpt
Dbgpt db-gpt
Weaknesses CWE-306
CPEs cpe:2.3:a:dbgpt:db-gpt:*:*:*:*:*:*:*:*
Vendors & Products Dbgpt
Dbgpt db-gpt
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Dbgpt Db-gpt
Eosphoros-ai Db-gpt
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-20T13:49:48.138Z

Reserved: 2026-08-21T17:52:36.079Z

Link: CVE-2026-77932

cve-icon Vulnrichment

Updated: 2026-10-20T13:49:43.755Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T01:17:19.503

Modified: 2026-10-20T14:17:00.810

Link: CVE-2026-77932

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T11:45:14Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function