🚨 CVE-2026-86124
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.
🎖@cveNotify
GitHub
GitHub - HKUDS/AutoAgent: "AutoAgent: Fully-Automated and Zero-Code LLM Agent Framework"
"AutoAgent: Fully-Automated and Zero-Code LLM Agent Framework" - HKUDS/AutoAgent
September 5, 2026 45
