THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-1880

OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt

Reserved:2024-02-26
Published:2024-06-06
Updated:2024-06-06

Description

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0. The vulnerability arises from the improper neutralization of special elements used in an OS command within the `_speech` method of the MacOSTTS class. Specifically, the use of `os.system` to execute the `say` command with user-supplied text allows for arbitrary code execution if an attacker can inject shell commands. This issue is triggered when the AutoGPT instance is run with the `--speak` option enabled and configured with `TEXT_TO_SPEECH_PROVIDER=macos`, reflecting back a shell injection snippet. The impact of this vulnerability is the potential execution of arbitrary code on the instance running AutoGPT. The issue was addressed in version 5.1.0.



HIGH: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command

Product status

Any version before 5.1.0
affected

References

https://huntr.com/bounties/4e742624-8771-4f3c-9634-3eaf33d6d58e

https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669

cve.org CVE-2024-1880

nvd.nist.gov CVE-2024-1880

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-1880