| Titolo | OpenAkita openakita ≤1.24.3 Local Privilege Escalation |
|---|
| Descrizione | OpenAkita provides an AI agent capable of executing shell commands on behalf of users. A local attacker can leverage this functionality to execute arbitrary commands in the context of the OpenAkita process. If the application is running with elevated privileges or the attacker can influence the AI’s decision-making, this results in privilege escalation. |
|---|
| Fonte | ⚠️ https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2 |
|---|
| Utente | din4 (UID 50867) |
|---|
| Sottomissione | 27/02/2026 03:38 (7 mesi fa) |
|---|
| Moderazione | 11/03/2026 14:08 (12 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 350393 [OpenAkita fino a 1.24.3 Chat API Endpoint shell.py run message escalationi di privilegi] |
|---|
| Punti | 15 |
|---|