{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adb_gptdb_gpt/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:db_gpt:db_gpt:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-77932"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DB-GPT (\u003c= 0.8.2)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","web-application","container-security","vulnerability","credential-exposure","mysql"],"_cs_type":"advisory","_cs_vendors":["DB-GPT"],"content_html":"\u003cp\u003eDB-GPT versions through 0.8.2 are vulnerable to an unauthenticated remote code execution (RCE) flaw originating from an insecure implementation of the \u003ccode\u003eget_user_from_headers\u003c/code\u003e function. This function serves as a mock authentication mechanism, incorrectly assigning the \u0026quot;admin\u0026quot; role to every incoming request regardless of provided headers.\u003c/p\u003e\n\u003cp\u003eThe vulnerability is exposed via the \u003ccode\u003e/api/v1/chat/react-agent\u003c/code\u003e endpoint. Attackers can leverage this misconfiguration to interact with the ReAct agent, specifically utilizing the \u003ccode\u003ecode_interpreter\u003c/code\u003e and \u003ccode\u003eshell_interpreter\u003c/code\u003e tools. Because these tools operate in an unsandboxed environment within the webserver container, they permit the execution of arbitrary Python or bash commands with root-level privileges. An attacker successful in exploiting this vulnerability can gain full control over the container, access sensitive application data, or interact with the bundled database using default administrative credentials.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full remote code execution within the DB-GPT webserver container. Attackers can achieve complete system compromise, exfiltrate data from the bundled database, or move laterally if the container lacks sufficient network segmentation. This vulnerability is particularly critical for deployments exposed to untrusted networks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade to a patched version of DB-GPT that addresses CVE-2026-77932 and removes the mock \u003ccode\u003eget_user_from_headers\u003c/code\u003e function.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the \u003ccode\u003e/api/v1/chat/react-agent\u003c/code\u003e endpoint to authorized internal segments only using a Web Application Firewall (WAF) or ingress controller rules.\u003c/li\u003e\n\u003cli\u003eAudit logs for suspicious HTTP POST requests directed at \u003ccode\u003e/api/v1/chat/react-agent\u003c/code\u003e containing shell metacharacters or unauthorized Python code patterns.\u003c/li\u003e\n\u003cli\u003eImplement strict resource limits and user privilege isolation for the DB-GPT container to minimize the impact of a potential container breakout or compromise.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T02:31:39Z","date_published":"2026-10-20T02:31:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-db-gpt-rce/","summary":"DB-GPT versions 0.8.2 and earlier contain an unauthenticated remote code execution vulnerability in the ReAct agent endpoint that allows attackers to execute arbitrary system commands as root.","title":"Unauthenticated RCE in DB-GPT via Insecure Mock Authentication","url":"https://feed.craftedsignal.io/briefs/2026-10-db-gpt-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:db_gpt:db_gpt:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}