CVE-2025-0868 Remote Code Execution in DocsGPT
An unauthorized attacker can execute arbitrary Python code via the /api/remote endpoint due to improper JSON parsing using eval().
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-0868?
CVE-2025-0868 is a critical code injection vulnerability in Arc53 DocsGPT, published on 20 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint..
This issue affects DocsGPT: from 0.8.1 through 0.12.0.
Weakness: CWE-95
Which versions are affected by CVE-2025-0868?
2 open source packages ship an affected version, including docsgpt.
| Package | Affected | Fixed in |
|---|---|---|
docsgpt npm | From 0.8.1 to 0.12.0 | None |
docsgpt npm | From 0.8.1 to 0.12.0 | None |
How do I fix CVE-2025-0868?
No fix has been published for CVE-2025-0868 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-0868 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-0868 exists.
Public exploit code: 1 Exploit-DB entry, 1 Nuclei template and 1 proofs of concept on GitHub.
Sources
Also known as GHSA-9gff-5v8w-x922.