| タイトル | badlogic pi-mono 0.58.4 Unauthenticated Remote Code Execution |
|---|
| 説明 | A critical unauthenticated remote code execution vulnerability exists in the @mariozechner/pi-mom Slack bot. Any member of the Slack workspace where the bot is installed can send a direct message or @mention to the bot, and the message content is passed directly to an LLM that has unrestricted access to a bash tool capable of executing arbitrary shell commands on the host system.
The bot performs no application-level authentication or authorization — the only requirement is Slack workspace membership. The bash tool has no command filtering, no allowlist, no blocklist, and no human-in-the-loop confirmation. The default execution mode is host (no sandboxing), meaning commands run with the full privileges of the process running the bot.
This is a true zero-interaction remote code execution: the attacker sends a Slack message, and the bot autonomously processes it, invokes the LLM, and executes whatever shell commands the LLM decides to run. The victim (bot operator) does not need to take any action. |
|---|
| ソース | ⚠️ https://github.com/August829/CVEP/issues/28 |
|---|
| ユーザー | Yu Bao (UID 88956) |
|---|
| 送信 | 2026年03月19日 10:23 (6 月 ago) |
|---|
| モデレーション | 2026年04月04日 15:50 (16 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 355327 [badlogic pi-mono 迄 0.58.4 pi-mom Slack Bot slack.ts 弱い認証] |
|---|
| ポイント | 20 |
|---|