Submit #520426: OpenManus 2025.3.13 OS Command Injectioninfo

TitelOpenManus 2025.3.13 OS Command Injection
BeschreibungCommand Execution in Openmanus ≤ 2025.3.13, when users use prompt contains shell command, such as “ls /tmp”,the server will generate a txt including all the file in /tmp
Quelle⚠️ https://magnificent-dill-351.notion.site/Command-Execution-in-Openmanus-2025-3-13-1b6c693918ed80b2826ef6bb385693fa
Benutzer
 s0l42 (UID 82389)
Einreichung14.03.2025 07:40 (vor 1 Jahr)
Moderieren24.03.2025 14:02 (10 days later)
StatusAkzeptiert
VulDB Eintrag300753 [mannaandpoem OpenManus bis 2025.3.13 Prompt python_execute.py erweiterte Rechte]
Punkte12

Want to stay up to date on a daily basis?

Enable the mail alert feature now!