DB-GPT 0.8.2 RCE via /api/v1/chat/react-agent (admin bypass)
CVE-2026-77932 Published on October 20, 2026
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
Vulnerability Analysis
CVE-2026-77932 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-77932
Want to know whenever a new CVE is published for Dbgpt Db Gpt? stack.watch will email you.
Affected Versions
eosphoros-ai DB-GPT:- Before and including 0.8.2 is affected.