| 标题 | OpenAkita openakita ≤1.24.3 Local Privilege Escalation |
|---|
| 描述 | OpenAkita provides an AI agent capable of executing shell commands on behalf of users. A local attacker can leverage this functionality to execute arbitrary commands in the context of the OpenAkita process. If the application is running with elevated privileges or the attacker can influence the AI’s decision-making, this results in privilege escalation. |
|---|
| 来源 | ⚠️ https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2 |
|---|
| 用户 | din4 (UID 50867) |
|---|
| 提交 | 2026-02-27 03時38分 (7 月前) |
|---|
| 管理 | 2026-03-11 14時08分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 350393 [OpenAkita 直到 1.24.3 Chat API Endpoint shell.py run message 权限提升] |
|---|
| 积分 | 15 |
|---|