| शीर्षक | andreashappe cochise v0.4.1 RCE |
|---|
| विवरण | Cochise is an LLM-driven pentest agent that connects to target machines via SSH. Two vulnerabilities combine to enable a second-stage remote code execution chain:
SSH host key verification is explicitly disabled (known_hosts=None), allowing man-in-the-middle attacks and connections to attacker-controlled SSH servers without any warning.
Raw SSH command output (including merged stderr) is appended directly to the LLM conversation history as a tool message with no filtering, sanitization, or taint marking. The LLM then generates and executes subsequent commands based on this untrusted input.
An attacker who controls a machine that Cochise connects to can inject prompt-injection text into the SSH session output, causing the LLM to generate malicious commands that Cochise will execute. |
|---|
| स्रोत | ⚠️ https://github.com/andreashappe/cochise/issues/13 |
|---|
| उपयोगकर्ता | ez-lbz (UID 87033) |
|---|
| सबमिशन | 04/08/2026 10:23 AM (1 महीना पहले) |
|---|
| संयम | 12/09/2026 10:30 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403205 [andreashappe cochise तक 0.4.1 SSH Host Key ssh_connection.py asyncssh.connect कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|