Vulnerability · Published Oct 20, 2026 · Assigned by VulnCheck

CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

Critical 9.8

In plain English

A critical-severity missing authentication in DB-GPT from eosphoros-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.8%top 43.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.

Affected products (as reported)

Vendor	Product	Versions
eosphoros-ai	DB-GPT	0 – through 0.8.2

Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Lasso.security Advisory technical-description, exploit
https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py#L25 technical-description
https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/tools/code_interpreter.py#L39 technical-description
VulnCheck Advisory: DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent third-party-advisory