提出 #558415: web-arena-x webarena <=0.2.0 Code Injection情報

タイトルweb-arena-x webarena <=0.2.0 Code Injection
説明WebArena is a standalone, self-hostable web environment for building LLM autonomous agents. In the WebArena project, specifically in the evaluators.py file (https://github.com/web-arena-x/webarena/blob/main/evaluation_harness/evaluators.py#L266), there is a critical vulnerability. The code checks if the "target_url" starts with "func" and if so, extracts a substring, replaces a value, and then passes it to the "eval()" function for execution. Since "eval()" is used with user-supplied input (as demonstrated by creating a config with "target_url= 'func:import('os').system('rm -f /path/to/sensitive/file')'"), it poses a Remote Code Execution (RCE) risk. This allows attackers to execute arbitrary code with the privileges of the running application, potentially leading to data loss, service outages, or malware installation. It aligns with CWE-94. More details: https://github.com/web-arena-x/webarena/issues/194
ソース⚠️ https://github.com/web-arena-x/webarena/issues/194
ユーザー
 ybdesire (UID 83239)
送信2025年04月15日 15:53 (1 年 ago)
モデレーション2025年04月27日 21:22 (12 days later)
ステータス承諾済み
VulDBエントリ306376 [web-arena-x webarena 迄 0.2.0 evaluators.py HTMLContentEvaluator target["url"] 特権昇格]
ポイント20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!