VULNERABILITY INTELLIGENCE
CVE-2025-0868
EPSS probability17.09%
CISA KEVNot currently listed
Published2025-02-20
Last modified2026-06-17
Description
A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.. This issue affects DocsGPT: from 0.8.1 through 0.12.0.
Weakness classification
- cvd@cert.pl: CWE-95