PyPI/agpt CVE-2024-6091: critical 9.8, EPSS 0.82%
AutoGPT bypass of the shell commands denylist settings
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g84q-54hf-36rg
- https://nvd.nist.gov/vuln/detail/CVE-2024-6091
- https://github.com/significant-gravitas/autogpt/commit/ef691359b774a1f9f80cf4f5ace9821967b718ed
- https://github.com/Significant-Gravitas/AutoGPT
- https://huntr.com/bounties/8a742c13-bb5e-4bc9-8b86-049d8a386050
CVE-2024-6091 · published · modified · JSON