Summary
generated automatically from NVD dataDB-GPT through 0.8.2 exposes the /api/v1/chat/react-agent endpoint without real authentication, because a mock get_user_from_headers function assigns the admin role to every caller (CWE-306). An unauthenticated remote attacker can send prompts that cause the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools to execute arbitrary Python or bash as root in the webserver container, and to reach the bundled database using default credentials. The flaw is rated CRITICAL with a CVSS v3.1 score of 9.8.
NVD description
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 20 oct. 2026
- Updated
- 20 oct. 2026
- Status
- Deferred
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
References (4)
Similar CVEs
Other vulnerabilities of type CWE-306
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.