CVE-2026-77926
8.8HighPublished 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-749
Impact
Authenticated low-privilege users can execute arbitrary OS commands on the host by sending crafted chat prompts or malicious documents to POST /dify/get_answer. This exposes datasource credentials and model API keys.
Root cause
The ChatBI common agent exposes an ungated deepagents execute tool that evaluates arbitrary system commands without authorization checks.
Affected systems
Aix-DB 1.2.4
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to a fixed release when available from the vendor. As an immediate workaround, block access to the POST /dify/get_answer endpoint or disable the ChatBI agent's execute tool in agent/common/enhanced_common_agent.py.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.