| शीर्षक | aiyiyi121 SxDevOps 1.1 Command Injection |
|---|
| विवरण | SxDevOps AIOps generate_host_task tool accepts a command parameter directly from the LLM tool call output without validation against DANGEROUS_COMMAND_PATTERNS. While this pattern list exists in the codebase (containing rm -rf, shutdown, reboot, etc.), it is only applied to MCP output sanitization and never to task draft creation. Prompt injection can cause the LLM to generate destructive commands that appear as legitimate task drafts awaiting user confirmation.
Vulnerable code in backend/aiops/services.py lines 12280-12379, 12765-12827:
DANGEROUS_COMMAND_PATTERNS = [r"rm\s+-rf", r"shutdown", r"reboot", ...]
# generate_host_task - command from LLM tool call, NOT validated
def generate_host_task(self, command: str, ...):
task_draft = build_task_draft(task_type="TASK_RUN_COMMAND", payload={"command": command, ...})
Impact: LLM hallucination or prompt injection can produce destructive shell commands. The auto-materialize code path (currently disabled but fully implemented) would eliminate the human confirmation step entirely if activated. |
|---|
| स्रोत | ⚠️ https://github.com/aiyiyi121/sxdevops/issues/16 |
|---|
| उपयोगकर्ता | _lxf (UID 63911) |
|---|
| सबमिशन | 24/08/2026 04:46 AM (27 दिन पहले) |
|---|
| संयम | 19/09/2026 12:15 PM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 407926 [aiyiyi121 SxDevOps 1.0/1.1 Command services.py generate_host_task command अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|