CVE-2023-37273
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Auto-GPT versions prior to 0.4.3 have a vulnerability that allows the docker-compose.yml file in the container to be overwritten, potentially leading to control over the host system. This issue has been patched in version 0.4.3.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the host system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Auto-GPT to version 0.4.3 or later to mitigate this security vulnerability.
Other vulnerabilities in Auto-GPT
See all- CVE-2023-37275Low
Auto-GPT is an experimental open-source application that, before version 0.4.3, allowed malicious external resources to trigger misleading messages in the console by using ANSI escape sequences. The issue has been patched in release version 0.4.3.
- CVE-2023-37274High
Auto-GPT is an experimental open-source application that had a vulnerability in the `execute_python_code` command before version 0.4.3, allowing for a path traversal attack. This enables overwriting .py files outside the workspace directory, potentially leading to arbitrary code execution on the host.
Original NVD description (English source)
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-compose.yml file from the one suggested in the official docker set up instructions. The docker-compose.yml file located in the repo root mounts itself into the docker container without write protection. This means that if malicious custom python code is executed via the `execute_python_file` and `execute_python_code` commands, it can overwrite the docker-compose.yml file and abuse it to gain control of the host system the next time Auto-GPT is started. The issue has been patched in version 0.4.3.