CVE-2026-77932

9.8Critical

Published 20 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-306

Impact

Unauthenticated attackers can execute arbitrary Python or bash commands as root within the webserver container and access the bundled database. They only need network access to the exposed API endpoint.

Root cause

The authentication helper mock function get_user_from_headers blindly assigns admin privileges to every incoming request on the /api/v1/chat/react-agent endpoint, exposing unsandboxed shell and Python execution tools.

Affected systems

DB-GPT through 0.8.2

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade DB-GPT past version 0.8.2 once a patch is published. As an immediate mitigation, block external network traffic to the /api/v1/chat/react-agent route or disable the ReAct agent tools at the reverse proxy or firewall.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-77932