| タイトル | Simular AI Agent-S 0.3.2 Denial of Service |
|---|
| 説明 | Agent-S contains a denial of service vulnerability in its model-generated GUI action execution workflow. The S3 worker accepts model-generated agent actions, validates only that the action is syntactically valid, converts it to executable code, and returns it for execution without enforcing resource boundaries on action parameters. Parameters such as wait duration, scroll count, hotkey list length, and typed text length are not capped.
A crafted task prompt can cause the model to generate an action such as agent.wait(3600), which is accepted and converted into time.sleep(3600). In a deployed agent service, a single malicious or malformed prompt can monopolize an agent execution worker for an attacker-controlled duration, causing legitimate tasks to remain pending or time out. |
|---|
| ソース | ⚠️ https://github.com/outlookgp/CVE/tree/main/AgentS_Action_Parameter_Budget_DoS_Report |
|---|
| ユーザー | outlookgp (UID 99658) |
|---|
| 送信 | 2026年07月11日 14:43 (2 月 ago) |
|---|
| モデレーション | 2026年09月02日 16:16 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 398136 [simular-ai Agent-S 迄 0.3.2 Model-generated GUI Action Execution Workflow grounding.py サービス拒否] |
|---|
| ポイント | 20 |
|---|