Description
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HKUDS | AutoAgent | — | — |
References
- GitHub Issue #96 issue-tracking
- tcp_server.py: 0.0.0.0 bind, no auth, shell execution technical-description
- docker_env.py: docker run --user root, -p publishes on 0.0.0.0 technical-description
- https://github.com/HKUDS/AutoAgent product
- VulnCheck Advisory: AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server third-party-advisory