CVE-2026-77926 Details

A remote code execution vulnerability exists in Aix-DB version 1.2.4, allowing authenticated non-admin users to execute operating system commands. This is achieved through the ChatBI common agent's deepagents execute tool, which is not gated by any approval process. Exploitation can occur by sending crafted messages to the '/dify/get_answer' endpoint or by uploading documents containing malicious text. The vulnerability exposes sensitive information such as datasource credentials and model API keys.

Users should avoid using the 'LocalShellBackend' for the common agent by default. If shell execution is necessary, it should be done in a controlled environment, such as a container or virtual machine, and not inherit the server's environment. For shared deployments, disable host shell execution immediately.