{"id":"CVE-2026-121455","title":"DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save","summary":"DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission. Attackers can submit arbi…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-862"],"vendor":"dbgate","product":"dbgate","affected":["dbgate < 7.3.3"],"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T15:17:03.816Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-121455","references":[{"url":"https://github.com/dbgate/dbgate/issues/1601","label":"GitHub Issue #1601"},{"url":"https://github.com/dbgate/dbgate"},{"url":"https://github.com/dbgate/dbgate/commit/9166a987bfec","label":"Fix commit"},{"url":"https://github.com/dbgate/dbgate/blob/v7.3.2/packages/api/src/controllers/connections.js#L227-L250"},{"url":"https://github.com/dbgate/dbgate/blob/v7.3.2/packages/api/src/controllers/connections.js#L372-L390"},{"url":"https://www.vulncheck.com/advisories/dbgate-before-7.3.3-missing-authorization-via-connections-test-and-connections-save","label":"VulnCheck Advisory: DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save"}],"tags":["cve.org"],"epss":0.00252,"epssPercentile":0.16758,"ingestedAt":"2026-11-05T19:30:42.977Z","slug":"CVE-2026-121455","body":"## Overview\n\nDbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe internal database hosts, or to /connections/save to overwrite stored connections.\n\n## Affected\n\n- `dbgate < 7.3.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}