# CVE-2026-121455: DbGate missing authorization in connection management

Source: https://junglewise.ai/threats/cve-2026-121455-dbgate-before-7-3-3-contains-a-missing-authorization  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-03. Updated: 2026-11-03  
License: CC BY 4.0 with a link back

CVE-2026-121455 · Severity: medium · CVSS 5.4 · Published 2026-11-03

DbGate is a database management tool that runs as a web application and desktop client. Authenticated users with restricted connection access can bypass LOGIN_PERMISSIONS checks to probe internal database hosts or modify stored database connections without authorization. This allows a partially-restricted user to discover and potentially compromise database systems they should not have access to.

Technologies: [DbGate](https://junglewise.ai/threats/technologies/dbgate). Vendors: [DbGate](https://junglewise.ai/threats/vendors/dbgate).

## Quick answers

**Is CVE-2026-121455 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-121455 being exploited in the wild.

**How severe is CVE-2026-121455?** Medium severity, with a CVSS score of 5.4, published 3 November 2026.

**Which products and versions are affected?** DbGate before 7.3.3.

**Is there a fix for CVE-2026-121455?** Yes: fixed in 7.3.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-121455 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-121455?** Check whether you run DbGate at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 7.3.3

## Technical details

The vulnerability is a missing authorization check in the test() and save() endpoint handlers for database connections. Authenticated users can submit arbitrary connection definitions to POST /connections/test or /connections/save without passing through testConnectionPermission validation, allowing them to probe internal database hosts or overwrite existing connection definitions. The flaw affects versions before 7.3.3.

## Affected products

- DbGate DbGate before 7.3.3

## Timeline

- 2026-11-03: disclosed

## References

- [https://github.com/dbgate/dbgate](https://github.com/dbgate/dbgate)
- [https://github.com/dbgate/dbgate/blob/v7.3.2/packages/api/src/controllers/connections.js](https://github.com/dbgate/dbgate/blob/v7.3.2/packages/api/src/controllers/connections.js)

## Related threats

- [DbGate path traversal in Files Endpoint](https://junglewise.ai/threats/cve-2026-101070-a-security-vulnerability-has-been-detected-in-dbgate-up-to-7-3-1)
- [DbGate arbitrary file write via path traversal in exportModelSql](https://junglewise.ai/threats/cve-2026-101069-a-weakness-has-been-identified-in-dbgate-up-to-7-3-1-affected-is)
- [DbGate path traversal in Create Connection Endpoint](https://junglewise.ai/threats/cve-2026-101068-a-security-flaw-has-been-discovered-in-dbgate-up-to-7-3-1-this)
- [DbGate path traversal in save-uploaded-file endpoint](https://junglewise.ai/threats/cve-2026-101067-a-vulnerability-was-identified-in-dbgate-up-to-6-8-1-7-0-2-7-1-8)
- [DbGate path traversal in archive link creation](https://junglewise.ai/threats/cve-2026-101066-a-vulnerability-was-determined-in-dbgate-up-to-7-3-1-the)