CVE-2026-77932 - DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
CVE ID :CVE-2026-77932 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller...