GHSA-g84q-54hf-36rgCriticalCVSS 9.8

AutoGPT bypass of the shell commands denylist settings

Published
September 11, 2024
Last Modified
October 26, 2026

🔗 CVE IDs covered (1)

📋 Description

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing commands with a modified path, such as /bin/./whoami, which is not recognized by the denylist.

🎯 Affected products1

  • pip/agpt:<= 0.5.1

🔗 References (6)