CVE-2024-6091: AutoGPT bypass of the shell commands denylist settings
(updated )
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing commands with a modified path, such as /bin/./whoami, which is not recognized by the denylist.
References
- github.com/advisories/GHSA-g84q-54hf-36rg
- github.com/pypa/advisory-database/tree/main/vulns/agpt/PYSEC-2026-257.yaml
- github.com/significant-gravitas/autogpt/commit/ef691359b774a1f9f80cf4f5ace9821967b718ed
- huntr.com/bounties/8a742c13-bb5e-4bc9-8b86-049d8a386050
- nvd.nist.gov/vuln/detail/CVE-2024-6091
- pypi.org/project/agpt
Code Behaviors & Features
Detect and mitigate CVE-2024-6091 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →