Critical 9.8Published Oct 19, 2026

CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

Updated under an hour ago (Oct 26, 2026, 2:30 PM ET)

Does this affect you?

It affects eosphoros-ai DB-GPT. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.80%, higher than 56% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for eosphoros-ai DB-GPT

Exploited in the last 30 days

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools run arbitrary Python or bash as root in the webserver container, including reaching the bundled database with default credentials.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-306
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.80% (percentile 56)
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Oct 20, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

eosphoros-ai DB-GPT eosphoros_ai:db_gpt (from the name)	through 0.8.2	CNA record

References

References

https://www.lasso.security/vulnerability-database/cve-2026-77932	technical-description, exploit
https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py#L25	technical-description
https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/tools/code_interpreter.py#L39	technical-description
https://www.vulncheck.com/advisories/db-gpt-through-0.8.2-unauthenticated-rce-via-api-v1-chat-react-agent	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.