DB-GPT ReAct agent unauthenticated RCE via mock get_user_from_headers admin bypass

#!/usr/bin/env bash
# check_cve_2026_77932.sh — Detect CVE-2026-77932 (DB-GPT mock-auth RCE)
# Usage: bash check_cve_2026_77932.sh <HOST> [PORT]
# Exit codes: 1=VULNERABLE, 0=PATCHED, 2=UNKNOWN

set -euo pipefail

HOST="${1:-}"
PORT="${2:-5670}"

if [ -z "$HOST" ]; then
  echo "Usage: $0 <HOST> [PORT]"
  exit 2
fi

BASE="http://${HOST}:${PORT}"
UA="noisgate-cve-checker/1.0"

echo "[*] Checking CVE-2026-77932 against ${BASE}"
echo "[*] Testing unauthenticated access to /api/v1/chat/react-agent ..."

# Step 1: Verify the endpoint exists and accepts unauthenticated POST
# We send a benign prompt that should NOT trigger code execution
# We're checking if the endpoint responds with 200 (auth bypass) vs 401/403
HTTP_CODE=$(curl -s -o /tmp/dbgpt_check_response.json -w '%{http_code}' \
  -X POST "${BASE}/api/v1/chat/react-agent" \
  -H "Content-Type: application/json" \
  -H "User-Agent: ${UA}" \
  -d '{"message": "What tools do you have available? List them.", "conv_uid": "noisgate-check"}' \
  --connect-timeout 10 --max-time 30 2>/dev/null) || true

if [ -z "$HTTP_CODE" ] || [ "$HTTP_CODE" = "000" ]; then
  echo "[!] UNKNOWN — Could not connect to ${BASE}. Is DB-GPT running?"
  rm -f /tmp/dbgpt_check_response.json
  exit 2
fi

echo "[*] HTTP response code: ${HTTP_CODE}"

if [ "$HTTP_CODE" = "401" ] || [ "$HTTP_CODE" = "403" ]; then
  echo "[+] PATCHED — Endpoint returned ${HTTP_CODE} (authentication enforced)."
  rm -f /tmp/dbgpt_check_response.json
  exit 0
fi

if [ "$HTTP_CODE" = "404" ]; then
  echo "[?] UNKNOWN — Endpoint not found. DB-GPT may not have the react-agent module enabled."
  rm -f /tmp/dbgpt_check_response.json
  exit 2
fi

if [ "$HTTP_CODE" = "200" ] || [ "$HTTP_CODE" = "422" ]; then
  # 200 = prompt accepted and processed (vulnerable)
  # 422 = validation error but endpoint is reachable without auth (still vulnerable)
  RESPONSE=$(cat /tmp/dbgpt_check_response.json 2>/dev/null || echo "")

  # Check if response mentions tools like code_interpreter or shell_interpreter
  if echo "$RESPONSE" | grep -qiE 'code_interpreter|shell_interpreter|tool|agent|admin'; then
    echo "[!] VULNERABLE — Endpoint accepts unauthenticated requests and agent tools are active."
    echo "[!] Mock get_user_from_headers() granted access without credentials."
    echo "[!] Response snippet: $(echo "$RESPONSE" | head -c 500)"
    rm -f /tmp/dbgpt_check_response.json
    exit 1
  else
    echo "[!] VULNERABLE — Endpoint returned ${HTTP_CODE} without authentication."
    echo "[!] The mock auth function accepted the request. Agent tool status unclear from response."
    echo "[!] Response snippet: $(echo "$RESPONSE" | head -c 500)"
    rm -f /tmp/dbgpt_check_response.json
    exit 1
  fi
fi

# Any other HTTP code
echo "[?] UNKNOWN — Unexpected HTTP ${HTTP_CODE}. Manual investigation required."
echo "    Response: $(cat /tmp/dbgpt_check_response.json 2>/dev/null | head -c 300)"
rm -f /tmp/dbgpt_check_response.json
exit 2