Safety vulnerability ID: 73328
The information on this page was manually curated by our Cybersecurity Intelligence Team.
A critical vulnerability in the ShellCommandExecutor component of the Forge library and significant-gravitas/autogpt affected versions allows attackers to execute arbitrary commands on the host system. The component lacks proper security measures, enabling command injection attacks. Additionally, attackers can bypass shell command denylists by using modified paths (e.g., /bin/./whoami). This vulnerability can lead to unauthorized access, data breaches, or system compromise. Users should avoid the ShellCommandExecutor in production, implement robust sandboxing, update autogpt to the latest version, and review command execution security measures to mitigate these risks.
Latest version: 0.2.2
An open-source attempt to make GPT-4 autonomous
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application