Autogpt Classic vulnerabilities
7 known vulnerabilities in Autogpt Classic from Agpt. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input `github.head.ref` is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can ci
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function. Specifically, the vulnerability exists
- 7.8 High severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0. The vulnerability arises from the improper neutralization of special elements used in an OS co
- 8.8 High severity
significant-gravitas/autogpt: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. The vulnerability stems from the lack of protections on the API endpoint receiving instructio
- 7.8 High severity
Auto-GPT: Improper Control of Generation of Code
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. When Auto-GPT is executed directly on the host system via the provided run.sh or run.bat files, custom Python code execution is sandboxed using a tempo
- 8.8 High severity
Auto-GPT: Improper Control of Generation of Code
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-co