| 제목 | handrew browserpilot 0.0 Code Injection |
|---|
| 설명 | browserpilot is an intelligent web browsing agent controlled by natural language with LLM.
The `__step_through_instructions` method in the `gpt_selenium_agent.py` file of the BrowserPilot project is vulnerable to code injection (CWE - 94). This method uses `exec()` to run the `action` code, which may be user - inputted or LLM - generated based on user input. Although there's a `_check_danger` function to prevent dangerous code execution, it's implemented poorly. It only relies on basic string matching, making it easy for attackers to bypass.
Attackers can craft malicious Python code, like accessing sensitive files or executing arbitrary commands. They can then inject this code into the input processed by `instruction_compiler`. Once the `__step_through_instructions` method is called, the malicious code will be executed due to the ineffective security check. This vulnerability affects all versions of the relevant software, posing a serious threat to system security.
When such malicious input is processed, it may lead to the execution of arbitrary code, data leakage, or disruption of normal service operations. This vulnerability affects users who rely on the browserpilot for browser - related automation tasks.
More details: https://github.com/handrew/browserpilot/issues/21 |
|---|
| 원천 | ⚠️ https://github.com/handrew/browserpilot/issues/21 |
|---|
| 사용자 | ybdesire (UID 83239) |
|---|
| 제출 | 2025. 04. 20. AM 09:03 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 05. 03. PM 02:51 (13 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 307195 [handrew browserpilot 까지 0.2.51 gpt_selenium_agent.py GPTSeleniumAgent instructions 권한 상승] |
|---|
| 포인트들 | 0 |
|---|