CVE-2026-4505 Details

A remote code execution vulnerability exists in eosphoros-ai DB-GPT versions through 0.7.5. The issue arises in the FastAPI endpoint '/v1/personal/agent/upload', where the plugin upload feature allows for unrestricted file uploads. Although the uploaded plugin code is supposed to undergo a security check based on its Abstract Syntax Tree (AST) structure, an attacker can still upload a malicious Python file that bypasses this check. Once the plugin is uploaded, its code is executed during the plugin loading process, specifically when the 'refresh_plugins()' function is called. This vulnerability can be exploited remotely, without any special permissions or authentication, and the code execution occurs silently, even if the plugin validation fails.