| Título | https://bagofwords.com/ bagofwords <=0.0.297 Remote command execution |
|---|
| Descripción | The `bagofwords` application, intended as an AI agent for data analysis, contains a critical Remote Code Execution (RCE) vulnerability. The application allows users to ask questions about their data, which prompts an LLM to generate Python code (specifically a `generate_df` function) that is subsequently executed on the server.
Due to the lack of input sanitization and insufficient sandboxing of the execution environment, an attacker can use a prompt injection attack to manipulate the LLM's output. By instructing the model to insert malicious Python commands (e.g., using `__import__('os').system(...)`) into the generated function, arbitrary system commands are executed on the host server when the application processes the query. This flaw enables attackers to bypass intended restrictions and gain unauthorized control over the server environment. |
|---|
| Fuente | ⚠️ https://github.com/bagofwords1/bagofwords/issues/60#https://github.com/Ka7arotto/cve/blob/main/bagofwords-rce.md |
|---|
| Usuario | Goku (UID 80486) |
|---|
| Sumisión | 2026-03-06 12:09 (hace 3 meses) |
|---|
| Moderación | 2026-03-20 13:38 (14 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 352065 [bagofwords1 bagofwords hasta 0.0.297 code_execution.py generate_df escalada de privilegios] |
|---|
| Puntos | 20 |
|---|