Live › vulnerability › CVE-2026-77926
Go to dashboardAix-DB 1.2.4's ChatBI common agent is built on deepagents with LocalShellBackend(inherit_env=True), with no approval gate or excluded tools. This gives it a host shell execute tool. Any logged-in user can run OS commands as the server user by sending a chat message to the get_answer endpoint, or by uploading a document with injected text. The commands inherit datasource credentials, DB connection strings and model API keys. No fixed version is published and exploitation in the wild is not reported.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Aix-DB | github | = 1.2.4 | – |
docker image ls or check the release tag to see if you run Aix-DB 1.2.4 (or a build from commit 5d370ad)v1.2.4 is the latest)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.
This page as .md · .json · in your agent: get_signal("CVE-2026-77926")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.