PT-2023-25877 · Autogpt · Autogpt
CVSS v3.1
7.5
High
| Vector | AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Auto-GPT versions prior to 0.4.3
Description
The issue allows for a path traversal attack, enabling the overwrite of any .py file outside the workspace directory by specifying a malicious
basename argument, such as ../../../main.py. This can be further exploited to achieve arbitrary code execution on the host running Auto-GPT. For example, overwriting autogpt/main.py can lead to code execution outside the intended docker sandbox environment when Auto-GPT is restarted.Recommendations
For versions prior to 0.4.3, update to version 0.4.3 to resolve the issue.
As a temporary workaround, consider running Auto-GPT in a virtual machine or an environment where file damage or program corruption is not critical.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Autogpt