CVE-2026-77932criticalCWE-306

CVE-2026-77932: critical vulnerability in eosphoros-ai DB-GPT

DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

Published

Follow this CVE+ Monitor DB-GPT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.3epss 0.8%
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
eosphoros-ai · DB-GPT
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — eosphoros-ai DB-GPT

In the same product, most dangerous first.

CVE-2026-73034CRITICALDB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id HeaderEPSS 5.7%CVE-2026-80104CRITICALDB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameEPSS 1.1%CVE-2026-77933CRITICALDB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose DeploymentEPSS 0.4%CVE-2026-4505MEDIUMeosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted uploadEPSS 0.2%