https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T12:11:59.209089+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-77926 fkie_cve-2026-77926 2026-10-21T12:11:59.227316+00:00

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.

 https://db.gcve.eu/vuln/ghsa-m2vr-p43p-p3h6 GHSA-m2vr-p43p-p3h6 2026-10-21T12:11:59.227403+00:00

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.