Read the docs
TI-2026-84348 Aliases CVE-2026-121455GHSA-23v4-23h4-8j67

Missing authorization in DbGate connection test and save endpoints

Priority LOW 24CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

DbGate before 7.3.3 lacks an authorization check in its connection test and save handlers, so authenticated users restricted by LOGIN_PERMISSIONS can bypass that restriction. An attacker with a low-privilege network account can submit arbitrary connection definitions to probe internal database hosts or overwrite stored connections. The flaw is classified as missing authorization (CWE-862).

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe internal database hosts, or to /connections/save to overwrite stored connections.

Why it matters now

EPSS 0.00252 16th percentileScored 2026-11-07
Fix Fixed dbgate (dbgate): 7.3.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
dbgatedbgatebefore 7.3.37.3.3Patch availableCNA
  • dbgate Vendordbgate Affected before 7.3.3 Fixed in 7.3.3 Patch available CNA

Remediation

DbGate users should upgrade to version 7.3.3 or later, which fixes the issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

  • Fix · CNA dbgate (dbgate) Fixed in 7.3.3

Timeline

  1. 2026-11-03 Threatist record created from CVE-2026-121455
  2. 2026-11-03 Alias added: GHSA-23v4-23h4-8j67

References

Patch 1

Other 4

  • TI-2026-35175 DbGate: Unauthenticated Remote Code Execution via JSON Script Runner CVSS 3.1CRITICAL 10.0
  • TI-2026-35176 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE CVSS 4.0CRITICAL 9.3
  • TI-2026-35177 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection CVSS 4.0CRITICAL 9.4
  • TI-2026-35462 DbGate: Remote Code Execution via functionName injection in loadReader endpoint CVSS 3.1HIGH 8.8
  • TI-2026-26969 dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration CVSS 3.1HIGH 8.3
  • TI-2025-32068 DbGate allows Unauthorized File Access via CSV Plugin CVSS 4.0HIGH 7.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences