← Back to browse · API

CVE-2025-0868

Severity
CRITICAL
CVSS
9.3
EPSS
0.1668
Risk score
43.04
CISA KEV
No
PoC
No
Published
2025-02-20
Modified
2025-10-03
First seen
2026-08-07
Aliases
EUVD-2025-4586, GHSA-9GFF-5V8W-X922
Products
arc53:DocsGPT 0.8.1 ≤0.12.0
Sources
euvd EUVD-2025-4586

Description

A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.. This issue affects DocsGPT: from 0.8.1 through 0.12.0.

References