| Titel | OpenAkita openakita ≤1.24.3 Local Privilege Escalation |
|---|
| Beschreibung | OpenAkita provides an AI agent capable of executing shell commands on behalf of users. A local attacker can leverage this functionality to execute arbitrary commands in the context of the OpenAkita process. If the application is running with elevated privileges or the attacker can influence the AI’s decision-making, this results in privilege escalation. |
|---|
| Quelle | ⚠️ https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2 |
|---|
| Benutzer | din4 (UID 50867) |
|---|
| Einreichung | 27.02.2026 03:38 (vor 7 Monaten) |
|---|
| Moderieren | 11.03.2026 14:08 (12 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 350393 [OpenAkita bis 1.24.3 Chat API Endpoint shell.py run message erweiterte Rechte] |
|---|
| Punkte | 15 |
|---|