https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 08:49:30 +0000 https://cve.radiocsirt.org/vuln/cve-2024-6091 <p><strong>Affected:</strong> significant-gravitas/autogpt, significant-gravitas autogpt</p> <p>A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as &#39;whoami&#39; and &#39;/bin/whoami&#39;. An attacker can circumvent this restriction by executing commands with a modified path, such as &#39;/bin/./whoami&#39;, which is not recognized by the denylist.</p> <p><strong>Affected:</strong> significant-gravitas/autogpt, significant-gravitas autogpt</p> <p>A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as &#39;whoami&#39; and &#39;/bin/whoami&#39;. An attacker can circumvent this restriction by executing commands with a modified path, such as &#39;/bin/./whoami&#39;, which is not recognized by the denylist.</p> https://cve.radiocsirt.org/vuln/cve-2024-6091 https://cve.radiocsirt.org/vuln/pysec-2026-257 <p><strong>Affected:</strong> PyPI: agpt</p> <p>A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as `whoami` and `/bin/whoami`. An attacker can circumvent this restriction by executing commands with a modified path, such as `/bin/./whoami`, which is not recognized by the denylist.</p> <p><strong>Affected:</strong> PyPI: agpt</p> <p>A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as `whoami` and `/bin/whoami`. An attacker can circumvent this restriction by executing commands with a modified path, such as `/bin/./whoami`, which is not recognized by the denylist.</p> https://cve.radiocsirt.org/vuln/pysec-2026-257