| 제목 | badlogic pi-mono 0.58.4 Unauthenticated Remote Code Execution |
|---|
| 설명 | A critical unauthenticated remote code execution vulnerability exists in the @mariozechner/pi-mom Slack bot. Any member of the Slack workspace where the bot is installed can send a direct message or @mention to the bot, and the message content is passed directly to an LLM that has unrestricted access to a bash tool capable of executing arbitrary shell commands on the host system.
The bot performs no application-level authentication or authorization — the only requirement is Slack workspace membership. The bash tool has no command filtering, no allowlist, no blocklist, and no human-in-the-loop confirmation. The default execution mode is host (no sandboxing), meaning commands run with the full privileges of the process running the bot.
This is a true zero-interaction remote code execution: the attacker sends a Slack message, and the bot autonomously processes it, invokes the LLM, and executes whatever shell commands the LLM decides to run. The victim (bot operator) does not need to take any action. |
|---|
| 원천 | ⚠️ https://github.com/August829/CVEP/issues/28 |
|---|
| 사용자 | Yu Bao (UID 88956) |
|---|
| 제출 | 2026. 03. 19. AM 10:23 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 04. PM 03:50 (16 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 355327 [badlogic pi-mono 까지 0.58.4 pi-mom Slack Bot slack.ts 약한 인증] |
|---|
| 포인트들 | 20 |
|---|