Remote Code Execution in Aix-DB ChatBI Agent

Aix-DB version 1.2.4 contains a critical remote code execution (RCE) vulnerability identified as CVE-2026-77926. The vulnerability exists within the ChatBI common agent, specifically due to an ungated tool known as 'deepagents execute'. This flaw allows authenticated non-admin users to manipulate the agent's input, resulting in the execution of arbitrary operating system commands on the underlying host. The impact of this vulnerability is significant, as successful exploitation provides attackers with the ability to exfiltrate sensitive data, including datasource credentials and model API keys, potentially leading to full system compromise.

Impact

Successful exploitation of CVE-2026-77926 allows attackers to bypass intended access controls, executing OS-level commands with the privileges of the Aix-DB application. This facilitates the theft of stored credentials, API keys, and internal system configurations, posing a high risk to organizations utilizing this software.

Recommendation

1. Immediately restrict access to the '/dify/get_answer' endpoint at the web application firewall (WAF) or load balancer level for unauthorized users.
2. Audit application logs for abnormal command patterns originating from the ChatBI agent.
3. Patch Aix-DB to the latest version once a security update is released by the vendor.
4. Perform a credential rotation for all datasource secrets and model API keys if unauthorized access is suspected.