Arc53 DocsGPT Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Arc53 DocsGPT versions 0.8.1 through 0.12.0. The issue arises from improper JSON data parsing using eval(), which allows an unauthorized attacker to send arbitrary Python code for execution via the /api/remote endpoint.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where DocsGPT is running.

Reproduction

To reproduce this vulnerability, send a request to the /api/remote endpoint with crafted JSON data that includes arbitrary Python code. The server will execute the injected code, leading to remote code execution.