Eric-C

An OS command injection flaw exists in the Shell Allowlist Handler component within the `nanobot/agent/tools/shell.py` file. The issue resides in the `ExecTool. guard command()` and `ExecTool. spawn()` functions, where insufficient validation of shell commands containing multiple segments, wrappers, comments, or chained commands allows for remote execution of arbitrary commands.

An issue exists in the Provider-returned Image URL Handler component within the ` download image data url()` function of the `nanobot/providers/image generation.py` file. This flaw allows a remote attacker to perform server-side request forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location. This occurs because provider-returned image URLs lacked the necessary protections applied to other network retrieval paths.

A flaw in the Login-shell Environment Handler allows local attackers to cause information disclosure. The issue exists in the `ExecTool. prepare command()` function within the `nanobot/agent/tools/shell.py` file. This occurs because shell startup files reintroduce environment variables when command execution defaults to a login shell.

Improper access controls exist within the MCP enabledTools Scope Handler component. The issue resides in the `connect mcp servers()` function located in the `nanobot/agent/tools/mcp.py` file. This flaw allows MCP resource and prompt wrappers to be registered outside the intended enabledTools scope, enabling a remote attacker to perform unauthorized manipulations.

An improper authentication flaw exists in the MCP Proxy component. Specifically, the `UserAPIKeyAuth()` function within the file `litellm/proxy/ experimental/mcp server/auth/user api key auth mcp.py` allows remote unauthenticated attackers to bypass API key checks.

An issue in the M2M JWT Handler component, specifically within the file `litellm/proxy/auth/user api key auth.py`, leads to improper authorization. This flaw allows a remote attacker to bypass authorization mechanisms, although the attack is characterized by high complexity and difficult exploitability.

A security flaw exists in the PROXY ADMIN database API Key Generator component within the `authenticate user()` function of the `litellm/proxy/auth/login utils.py` file. A remote attacker can perform a manipulation that results in session expiration.

An issue in the MCP Server Connection Testing component allows for server-side request forgery (SSRF), which is a flaw that enables an attacker to induce the server-side application to make requests to an unintended location. This occurs within the ` execute with mcp client()` function located in the `litellm/proxy/ experimental/mcp server/rest endpoints.py` file. Remote exploitation of this flaw is possible.

An authentication bypass exists in the SSO Debug Flow component. A remote attacker can manipulate the `json.dumps()` function within the file `litellm/proxy/management endpoints/ui sso.py`, which can lead to missing authentication.

An issue exists in the SSO Authentication Flow component within the `get redirect response from openid()` function of the `litellm/proxy/management endpoints/ui sso.py` file. Remote manipulation of this function can lead to session expiration.

An authorization bypass exists in the Completions Interface. The issue occurs within the `async pre call hook()` function located in the `enterprise/enterprise hooks/banned keywords.py` file. Remote attackers can manipulate the `prompt` argument to achieve incorrect authorization.

A server-side request forgery (SSRF) exists in the MCP OpenAPI Spec Loader component. The issue occurs within the `load openapi spec async()` function located in the `litellm/proxy/ experimental/mcp server/openapi to mcp generator.py` file. A remote attacker can trigger this by manipulating the `spec path` argument.

An improper authorization issue exists in the Admin Key Handler component within the file `litellm/proxy/management endpoints/key management endpoints.py`. This flaw allows a remote attacker to bypass authorization requirements through an unknown function.

A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user manager.py of the component userdata Endpoint. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw in the View Endpoint component within the `server.py` file allows for remote cross site scripting. Cross site scripting is a type of security gap where malicious scripts are injected into otherwise trusted websites.

A path traversal flaw exists in the LoadImage Node component within the `folder paths.get annotated filepath()` function of the `folder paths.py` file. This issue occurs due to improper manipulation of the `Name` argument, allowing for remote exploitation.

A path traversal issue exists in the Model Preview Endpoint within the `get model preview()` function of the `app/model manager.py` file. This flaw allows a remote attacker to manipulate file paths to access unauthorized directories.

A cross-site request forgery issue exists in the `create origin only middleware()` function within the server.py file. This flaw allows a remote attacker to initiate unauthorized requests by manipulating the application.

A flaw in the XML Handler component allows remote attackers to cause improper neutralization of directives in dynamically evaluated code. This issue occurs within the `ActionNode.xml fill()` function located in the `metagpt/actions/action node.py` file.

Name of the Vulnerable Software and Affected Versions FoundationAgents MetaGPT versions up to 0.8.1 Description A flaw exists in the Terminal.run command function within the metagpt/tools/libs/terminal.py library. This allows for os command injection, potentially enabling remote exploitation. The exploit has been publicly disclosed. Recommendations Apply the patch d04ffc8dc67903e8b327f78ec121df5e190ffc7b.