CVE-2026-26015

An attacker crafts a malicious payload that bypasses the control mechanism known as 'MCP test'. The vulnerability is classified as CWE-77 (Improper Neutralization of Special Elements used in a Command), which means the application does not properly filter input data passed to system calls or commands. This results in the ability to inject and execute arbitrary commands in the context of the application process. The attack can be conducted remotely, without authentication and without user interaction.

An attacker can gain full control over the server — execute arbitrary code, read or modify data, and potentially move laterally within the target network. The maximum CVSS score of 10.0 reflects the full impact on confidentiality, integrity, and availability of both the attacked system and related resources.

DocsGPT must be immediately updated to version 0.16.0 or later. The patch is available in the vendor's GitHub repository: https://github.com/arc53/DocsGPT/releases/tag/0.16.0. Until the update is deployed, it is recommended to restrict network access to the DocsGPT instance (e.g., firewall, VPN) and monitor logs for unexpected system command invocations.

DocsGPT versions 0.15.0 to below 0.16.0 (all deployments: vendor's official website, public and local installations).