जमा करें #886451: Simular AI Agent-S 0.3.2 Denial of Service
| शीर्षक | Simular AI Agent-S 0.3.2 Denial of Service |
|---|---|
| विवरण | Agent-S contains a denial of service vulnerability in its model-generated GUI action execution workflow. The S3 worker accepts model-generated agent actions, validates only that the action is syntactically valid, converts it to executable code, and returns it for execution without enforcing resource boundaries on action parameters. Parameters such as wait duration, scroll count, hotkey list length, and typed text length are not capped. A crafted task prompt can cause the model to generate an action such as agent.wait(3600), which is accepted and converted into time.sleep(3600). In a deployed agent service, a single malicious or malformed prompt can monopolize an agent execution worker for an attacker-controlled duration, causing legitimate tasks to remain pending or time out. |
| स्रोत | ⚠️ https:/ |
| उपयोगकर्ता | outlookgp (UID 99658) |
| सबमिशन | 11/07/2026 02:43 PM (2 महीनों पहले) |
| संयम | 02/09/2026 04:16 PM (2 months later) |
| स्थिति | स्वीकृत |
| VulDB प्रविष्टि | 398136 [simular-ai Agent-S तक 0.3.2 Model-generated GUI Action Execution Workflow grounding.py सेवा अस्वीकार] |
| अंक | 20 |