Critical severity · published Sep 11, 2024
CVE-2024-6091
Shell Command Denylist Bypass in significant-gravitas/autogpt
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can circumvent this restriction by executing commands with a modified path, such as '/bin/./whoami', which is not recognized by the denylist.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
significant-gravitas/autogpt · significant-gravitas
before 0.5.1 · source: vendor
AC
Autogpt Classic · Agpt
0.5.1 · source: NVD
AU
Autogpt · Significant-gravitas
before 0.5.1 · source: CISA
Affected product
SI
significant-gravitas/autogpt
significant-gravitas
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6091
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6091
Patch
https://github.com/significant-gravitas/autogpt/commit/ef691359b774a1f9f80cf4f5ace9821967b718ed
Exploit
https://huntr.com/bounties/8a742c13-bb5e-4bc9-8b86-049d8a386050
More from significant-gravitas/autogpt
9.8
CVE-2024-8156
Command Injection in significant-gravitas/autogpt
9.8
CVE-2024-1881
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
8.8
CVE-2025-1040
Server-Side Template Injection (SSTI) in significant-gravitas/autogpt
8.8
CVE-2024-1879
CSRF to RCE in significant-gravitas/autogpt
7.8
CVE-2024-1880
OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt