by Kastro
Paper/Archive/CVE-2024-8156

CVE-2024-8156

significant-gravitas significant-gravitas/autogpt — Command Injection in significant-gravitas/autogpt

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
55
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.8.778 × 2015.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input `github.head.ref` is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions up to and including the latest version. An attacker can exploit this by creating a branch name with a malicious payload and opening a pull request, potentially leading to reverse shell access or theft of sensitive tokens and keys.

Affected

ProductAffectedFixed inSource
significant-gravitas/autogptunspecified – < 0.5.10.5.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntr_ai (CNA)8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploithuntr.com/bounties/959efe87-f109-4cef-94d8-90ff2c7aef51refgithub.com/significant-gravitas/autogpt/commit/1df7d527dd37dff8363dc162fb58d300f072e302