PT-2024-18388 · Autogpt · Autogpt

Published 2024-06-06 · Updated 2025-08-05 · CVE-2024-1881

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AutoGPT versions v0.5.0 through v5.1.0

Description The issue arises from the application's method of validating shell commands against an allowlist or denylist, where it only checks the first word of the command. This allows an attacker to bypass the intended restrictions by crafting commands that are executed despite not being on the allowlist or by including malicious commands not present in the denylist. Successful exploitation could allow an attacker to execute arbitrary shell commands.

Recommendations For versions v0.5.0 through v5.1.0, as a temporary workaround, consider disabling the shell command validation function until a patch is available. Restrict access to the shell command module to minimize the risk of exploitation. Avoid using the shell command variable in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-1881

Affected Products

Autogpt

References · 8

• https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-1881 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1881 · Vendor Advisory
• https://t.me/cveNotify/130936 · Telegram Post
• https://huntr.com/bounties/416c4a8b-36ba-4bbc-850a-a2f978b0fac8 · Note
• https://t.me/cvenotify/97541 · Telegram Post
• https://twitter.com/CveFindCom/status/1798784924658635263 · Twitter Post
• https://twitter.com/CVEnew/status/1798786709074718972 · Twitter Post