/Vulnerability Library

DbGate - Remote Code Execution via Dynamic Import Bypass

CVE-2026-47670
Verified

Description

DbGate versions <= 7.1.8 are vulnerable to authenticated remote code execution via the POST /runners/load-reader endpoint. The functionName parameter is directly interpolated into a JavaScript code template without sanitization. The require=null mitigation is bypassed via dynamic import().

Severity

Critical

CVSS Score

9.4

Exploit Probability

2%

Affected Product

dbgate

Published Date

June 15, 2026

Template Author

theamanrawat

CVE-2026-47670.yaml
9.4Score

CVSS Metrics

CVSS Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVE ID:
cve-2026-47670
CWE ID:
cwe-77

References

https://github.com/dbgate/dbgate/security/advisories/GHSA-wm5r-5qp3-5vxfhttps://nvd.nist.gov/vuln/detail/CVE-2026-47670https://github.com/advisories/GHSA-wm5r-5qp3-5vxf