Submit #521545: OpenManus 2025.3.13 Arbitrary File Writinginfo

TitleOpenManus 2025.3.13 Arbitrary File Writing
DescriptionArbitrary File Writing in Openmanus ≤ 2025.3.13, when users use prompt to ask OpenManus to write a file to a target directory, it will write what users type to target directory without any check.
Source⚠️ https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41
User
 s0l42 (UID 82389)
Submission03/17/2025 08:26 (1 Year ago)
Moderation03/29/2025 20:39 (13 days later)
StatusAccepted
VulDB entry302007 [mannaandpoem OpenManus up to 2025.3.13 File app/tool/file_saver.py execute access control]
Points13

Interested in the pricing of exploits?

See the underground prices here!