TI-2024-07563 CVE-2024-8156 · GHSA-rrfw-qqmx-gqwx
Command Injection in significant-gravitas/autogpt
Priority HIGH 76
A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt.
Vulnerabilities
8 records
TI-2024-05646 CVE-2024-6091 · GHSA-g84q-54hf-36rg
Shell Command Denylist Bypass in significant-gravitas/autogpt
Priority HIGH 82
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings.
TI-2024-01749 CVE-2024-1880 · GHSA-rf3r-wjj9-3842
OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt
Priority HIGH 69
An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0.
TI-2024-01750 CVE-2024-1881 · GHSA-rr88-j2r8-3xpc
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
Priority HIGH 76
AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function.
TI-2024-01748 CVE-2024-1879 · GHSA-wwg8-x274-5x5g
CSRF to RCE in significant-gravitas/autogpt
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server.
Priority LOW 20
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.
Priority LOW 36
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.
TI-2023-18903 CVE-2023-37273
Docker escape in Auto-GPT when running from docker-compose.yml included in git repo
Priority MEDIUM 40
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.