Skip to content
OpenAdvisories

Package · PyPI

agpt

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Shell Command Denylist Bypass in significant-gravitas/autogpt

    A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can c…