Eric-C

**Name of the Vulnerable Software and Affected Versions** HKUDS nanobot versions prior to 0.3.0 **Description** An OS command injection flaw exists in the Shell Allowlist Handler component within the `nanobot/agent/tools/shell.py` file. The issue resides in the `ExecTool. guard command()` and `ExecTool. spawn()` functions, where insufficient validation of shell commands containing multiple segments, wrappers, comments, or chained commands allows for remote execution of arbitrary commands. **Recommendations** Upgrade to version 0.3.0. As a temporary mitigation, restrict the use of the `ExecTool. guard command()` and `ExecTool. spawn()` functions.

**Name of the Vulnerable Software and Affected Versions** HKUDS nanobot versions prior to 0.3.1 **Description** An issue exists in the Provider-returned Image URL Handler component within the ` download image data url()` function of the `nanobot/providers/image generation.py` file. This flaw allows a remote attacker to perform server-side request forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location. This occurs because provider-returned image URLs lacked the necessary protections applied to other network retrieval paths. **Recommendations** Update to version 0.3.1 or apply patch 5095.

**Name of the Vulnerable Software and Affected Versions** HKUDS nanobot versions prior to 0.3.0 **Description** A flaw in the Login-shell Environment Handler allows local attackers to cause information disclosure. The issue exists in the `ExecTool. prepare command()` function within the `nanobot/agent/tools/shell.py` file. This occurs because shell startup files reintroduce environment variables when command execution defaults to a login shell. **Recommendations** Update to version 0.3.0.

**Name of the Vulnerable Software and Affected Versions** HKUDS nanobot versions prior to 0.3.0 **Description** Improper access controls exist within the MCP enabledTools Scope Handler component. The issue resides in the `connect mcp servers()` function located in the `nanobot/agent/tools/mcp.py` file. This flaw allows MCP resource and prompt wrappers to be registered outside the intended enabledTools scope, enabling a remote attacker to perform unauthorized manipulations. **Recommendations** Upgrade to version 0.3.0.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.59.9 **Description** An improper authentication flaw exists in the MCP Proxy component. Specifically, the `UserAPIKeyAuth()` function within the file `litellm/proxy/ experimental/mcp server/auth/user api key auth mcp.py` allows remote unauthenticated attackers to bypass API key checks. **Recommendations** Update to a version later than 1.59.8. As a temporary workaround, restrict access to the `UserAPIKeyAuth()` function in the MCP Proxy component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** An issue in the M2M JWT Handler component, specifically within the file `litellm/proxy/auth/user api key auth.py`, leads to improper authorization. This flaw allows a remote attacker to bypass authorization mechanisms, although the attack is characterized by high complexity and difficult exploitability. **Recommendations** Update to a version later than 1.82.2. As a temporary workaround, restrict access to the `litellm/proxy/auth/user api key auth.py` file or the M2M JWT Handler component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** A security flaw exists in the PROXY ADMIN database API Key Generator component within the `authenticate user()` function of the `litellm/proxy/auth/login utils.py` file. A remote attacker can perform a manipulation that results in session expiration. **Recommendations** Update to a version later than 1.82.2. As a temporary workaround, restrict access to the `authenticate user()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** An issue in the MCP Server Connection Testing component allows for server-side request forgery (SSRF), which is a flaw that enables an attacker to induce the server-side application to make requests to an unintended location. This occurs within the ` execute with mcp client()` function located in the `litellm/proxy/ experimental/mcp server/rest endpoints.py` file. Remote exploitation of this flaw is possible. **Recommendations** Update to version 1.82.3 or later. As a temporary workaround, restrict access to the ` execute with mcp client()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** An authentication bypass exists in the SSO Debug Flow component. A remote attacker can manipulate the `json.dumps()` function within the file `litellm/proxy/management endpoints/ui sso.py`, which can lead to missing authentication. **Recommendations** Update to version 1.82.3 or later. As a temporary workaround, restrict access to the SSO Debug Flow component or the `json.dumps()` function in `litellm/proxy/management endpoints/ui sso.py` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** An issue exists in the SSO Authentication Flow component within the `get redirect response from openid()` function of the `litellm/proxy/management endpoints/ui sso.py` file. Remote manipulation of this function can lead to session expiration. **Recommendations** Update to a version later than 1.82.2. As a temporary workaround, restrict access to the `get redirect response from openid()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.6 **Description** An authorization bypass exists in the Completions Interface. The issue occurs within the `async pre call hook()` function located in the `enterprise/enterprise hooks/banned keywords.py` file. Remote attackers can manipulate the `prompt` argument to achieve incorrect authorization. **Recommendations** Update to version 1.82.6 or later. As a temporary workaround, restrict access to the `async pre call hook()` function in the `enterprise/enterprise hooks/banned keywords.py` file.

**Name of the Vulnerable Software and Affected Versions** BerriAI litellm versions prior to 1.82.3 **Description** A server-side request forgery (SSRF) exists in the MCP OpenAPI Spec Loader component. The issue occurs within the `load openapi spec async()` function located in the `litellm/proxy/ experimental/mcp server/openapi to mcp generator.py` file. A remote attacker can trigger this by manipulating the `spec path` argument. **Recommendations** Update to a version later than 1.82.2. As a temporary workaround, restrict access to the `load openapi spec async()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** litellm versions prior to 1.63.2 **Description** An improper authorization issue exists in the Admin Key Handler component within the file `litellm/proxy/management endpoints/key management endpoints.py`. This flaw allows a remote attacker to bypass authorization requirements through an unknown function. **Recommendations** Apply patch 23781 to resolve the issue.

A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user manager.py of the component userdata Endpoint. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** ComfyUI versions prior to 0.13.0 **Description** A flaw in the View Endpoint component within the `server.py` file allows for remote cross site scripting. Cross site scripting is a type of security gap where malicious scripts are injected into otherwise trusted websites. **Recommendations** Update to a version later than 0.13.0. As a temporary workaround, restrict access to the View Endpoint component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ComfyUI versions prior to 0.13.0 **Description** A path traversal flaw exists in the LoadImage Node component within the `folder paths.get annotated filepath()` function of the `folder paths.py` file. This issue occurs due to improper manipulation of the `Name` argument, allowing for remote exploitation. **Recommendations** Update to a version later than 0.13.0. As a temporary workaround, restrict access to the `folder paths.get annotated filepath()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** ComfyUI versions prior to 0.13.0 **Description** A path traversal issue exists in the Model Preview Endpoint within the `get model preview()` function of the `app/model manager.py` file. This flaw allows a remote attacker to manipulate file paths to access unauthorized directories. **Recommendations** Update to a version later than 0.13.0. As a temporary workaround, restrict access to the `get model preview()` function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** ComfyUI versions prior to 0.13.1 **Description** A cross-site request forgery issue exists in the `create origin only middleware()` function within the server.py file. This flaw allows a remote attacker to initiate unauthorized requests by manipulating the application. **Recommendations** Update to a version later than 0.13.0. As a temporary workaround, consider restricting access to the `create origin only middleware()` function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** FoundationAgents MetaGPT versions prior to 0.8.2 **Description** A flaw in the XML Handler component allows remote attackers to cause improper neutralization of directives in dynamically evaluated code. This issue occurs within the `ActionNode.xml fill()` function located in the `metagpt/actions/action node.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `ActionNode.xml fill()` function.

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions up to 0.8.1 Description A flaw exists in the Terminal.run command function within the metagpt/tools/libs/terminal.py library. This allows for os command injection, potentially enabling remote exploitation. The exploit has been publicly disclosed. Recommendations Apply the patch d04ffc8dc67903e8b327f78ec121df5e190ffc7b.