Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Shell Command Denylist Bypass in significant-gravitas/autogpt
Vulnerability Description
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can circumvent this restriction by executing commands with a modified path, such as '/bin/./whoami', which is not recognized by the denylist.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Significant AutoGPT 操作系统命令注入漏洞
Vulnerability Description
Auto-GPT是Significant Gravitas开源的一个人工智能软件代理程序。 Significant AutoGPT 0.5.1版本存在操作系统命令注入漏洞，该漏洞源于允许攻击者绕过shell命令拒绝列表设置。
CVSS Information
N/A
Vulnerability Type
N/A