prisonaiaagents Command Injection Vulnerability (CVE-2024-40111) Analysis

Vulnerability Overview This vulnerability is located in the file of the package. The Memory Hooks Executor passes user-controlled command strings directly to using the parameter. This process lacks any sanitization, shell quoting, character filtering, or allowlist checks. Shell metacharacters (such as semicolons, pipes, backticks, dollar-sign substitutions, newlines, etc.) are interpreted and executed by , leading to arbitrary OS command injection. The primary attack surfaces include: 1. The and event types registered via hooks configuration. 2. The lifecycle configuration, where registered hooks (e.g., and ) are automatically triggered during agent operations. An attacker with file write permissions can overwrite to silently execute a payload during subsequent lifecycle events. Impact Scope Affected Package: (pip) Affected Versions: = 1.5.128 CVE ID: CVE-2024-40111 CVSS Score: 9.3 / 10 (Critical) Remediation 1. Replace shell=True: Replace in with a parsed list of arguments. Before Fix: After Fix: 2. Environment Variable Passing: For hooks requiring dynamic context values, these should be passed as environment variables rather than being interpolated into the command string. 3. Allowlist Validation: Upon loading , verify that the first token of each hook command is within an allowlist of permitted executables. If the executable is not in the allowlist, reject the entry before calling any subprocess. Proof of Concept (POC) Surface 1: hooks.json lifecycle payload Surface 2: pre_run_command event type Persistence payload**

Goal Reached Thanks to every supporter — we hit 100%!

prisonaiaagents Command Injection Vulnerability (CVE-2024-40111) Analysis

More from this source