Most recent entries from all

bdu:2025-00913

2026-10-22T07:44:50.999078+00:00

bdu:2025-00913

EUVD-2026-162643

2026-10-22T07:44:50.999114+00:00

EUVD-2026-162643

fkie_cve-2024-6091

2026-10-22T07:44:50.999128+00:00

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can circumvent this restriction by executing commands with a modified path, such as '/bin/./whoami', which is not recognized by the denylist.

GHSA-g84q-54hf-36rg — AutoGPT bypass of the shell commands denylist settings

2026-10-22T07:44:50.999159+00:00

Affected: PyPI: agpt

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as `whoami` and `/bin/whoami`. An attacker can circumvent this restriction by executing commands with a modified path, such as `/bin/./whoami`, which is not recognized by the denylist.

PYSEC-2026-257 — AutoGPT bypass of the shell commands denylist settings

2026-10-22T07:44:50.999184+00:00

Affected: PyPI: agpt

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as `whoami` and `/bin/whoami`. An attacker can circumvent this restriction by executing commands with a modified path, such as `/bin/./whoami`, which is not recognized by the denylist.