# CVE-2026-26015: DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing…

Source: https://junglewise.ai/threats/cve-2026-26015-docsgpt-is-a-gpt-powered-chat-for-documentation-from-version-0-15  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-29  
License: CC BY 4.0 with a link back

CVE-2026-26015 · Severity: critical · CVSS 9.8 · Published 2026-04-29

DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been patched in version 0.16.0.

Technologies: [Arc53 DocsGPT](https://junglewise.ai/threats/technologies/docsgpt). Vendors: [Arc53](https://junglewise.ai/threats/vendors/arc53).

## Quick answers

**Is CVE-2026-26015 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-26015 being exploited in the wild.

**How severe is CVE-2026-26015?** Critical severity, with a CVSS score of 9.8, published 29 April 2026.

**Which products and versions are affected?** Arc53 DocsGPT. The advisory does not name versions.

**Is there a fix for CVE-2026-26015?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-26015?** Check whether you run Arc53 DocsGPT. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Arc53 DocsGPT

## Related threats

- [DocsGPT OAuth token exposure in callback-status endpoint](https://junglewise.ai/threats/cve-2026-91201-docsgpt-oauth-token-exposure-in-callback-status-endpoint)
- [DocsGPT server-side template injection in custom prompts](https://junglewise.ai/threats/cve-2026-31020-docsgpt-server-side-template-injection-in-custom-prompts)
- [arc53 DocsGPT insufficient data authenticity in credential storage](https://junglewise.ai/threats/cve-2026-13483-arc53-docsgpt-insufficient-data-authenticity-in-credential)
- [DocsGPT remote code execution via eval in JSON parsing](https://junglewise.ai/threats/cve-2025-0868-docsgpt-remote-code-execution-via-eval-in-json-parsing)