Description
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| apconw | Aix-DB | 1.2.4 – ≤ 1.2.4 | — |
References
- Lasso.security Advisory technical-description exploit
- https://github.com/apconw/Aix-DB/blob/5d370adf3e695fc8b11137e5beeb01973cb46810/agent/common/enhanced_common_agent.py#L237 technical-description
- VulnCheck Advisory: Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool third-party-advisory