| शीर्षक | eosphoros-ai DB-GPT 0.8.1 CWE-1336 Improper Neutralization of Special Elements Used in a T |
|---|
| विवरण | DB-GPT v0.8.1 executes template code from user-uploaded skill instructions: the SKILL.md of an uploaded skill package is wrapped verbatim into a Jinja2 template by FileBasedSkill.get_prompt() (packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py:330,336-338 — template_format="jinja2", template_is_strict=False, zero sanitization), embedded into the react-agent workflow prompt and bound as a jinja2 PromptTemplate (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:3606-3618), and finally rendered by build_system_prompt with a bare jinja2 Template().render() without SandboxedEnvironment (packages/dbgpt-core/src/dbgpt/agent/core/base_agent.py:1258, the actual sink of this chain), so an attacker's Jinja2 SSTI payload executes inside the server process before the LLM is ever called. Both endpoints are unauthenticated by default: POST /api/v1/skills/upload (agentic_data_api.py:548-551) and POST /api/v1/chat/react-agent depend on get_user_from_headers() (packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py:25-38), whose mock auth always returns role="admin". One unauthenticated upload plus one trigger request suffices; dynamically verified 2026-08-08, PoC 5/5 — the payload created the marker file dbgpt_ssti_marker.txt with content POC_SSTI_RCE_OK, confirming arbitrary code execution (read configs/credentials/env vars, arbitrary file write, terminate processes/exhaust resources). Docker-independent: a standard default install listening on x.x.x.x:5670 is affected.
Affected: DB-GPT 0.8.1 (eosphoros-ai/DB-GPT). Patched versions: none as of the submission; note that v0.8.2 (2026-08-26) contains a Jinja2 sandbox security fix whose coverage of this vulnerability requires regression verification.
Reported to the vendor: https://github.com/eosphoros-ai/DB-GPT/issues/3291 (public issue filed 2026-10-14). Reported to CNVD: CNVD-2026-37344 (accepted 2026-09-17, severity high). |
|---|
| स्रोत | ⚠️ https://github.com/ybyu-ieu/agent-security-advisories/blob/main/dbgpt/dbgpt-skill-template-jinja2-ssti-rce.md |
|---|
| उपयोगकर्ता | Ybyu (UID 101038) |
|---|
| सबमिशन | 14/10/2026 10:24 AM (22 दिन पहले) |
|---|
| संयम | 05/11/2026 07:18 AM (22 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 431394 [eosphoros-ai DB-GPT तक 0.8.1 Jinja2 Template __init__.py FileBasedSkill.get_prompt दूरस्थ कोड निष्पादन] |
|---|
| अंक | 20 |
|---|