Submeter #886451: Simular AI Agent-S 0.3.2 Denial of Service

Agent-S contains a denial of service vulnerability in its model-generated GUI action execution workflow. The S3 worker accepts model-generated agent actions, validates only that the action is syntactically valid, converts it to executable code, and returns it for execution without enforcing resource boundaries on action parameters. Parameters such as wait duration, scroll count, hotkey list length, and typed text length are not capped.
A crafted task prompt can cause the model to generate an action such as agent.wait(3600), which is accepted and converted into time.sleep(3600). In a deployed agent service, a single malicious or malformed prompt can monopolize an agent execution worker for an attacker-controlled duration, causing legitimate tasks to remain pending or time out.

• Fonte: ⚠️ https://github.com/outlookgp/CVE/tree/main/AgentS_Action_Parameter_Budget_DoS_Report
• Utilizador: outlookgp (UID 99658)
• Submissão: 11/07/2026 14h43 (há 2 meses)
• Moderação: 02/09/2026 16h16 (2 months later)
• Estado: Aceite
• Entrada VulDB: 398136 [simular-ai Agent-S até 0.3.2 Model-generated GUI Action Execution Workflow grounding.py Negação de Serviço]
• Pontos: 20