AutoAgent TCP server unauthenticated remote code execution as root
AutoAgent's TCP server binds to all network interfaces by default and executes attacker-supplied commands without authentication, allowing remote attackers to run arbitrary code as root.
- Vendor
- HKUDS
- Product
- AutoAgent
- CVSS
- 9.8
- EPSS (exploit probability)
- N/A
- Status
- patched
- Published
AutoAgent, an AI agent framework maintained by HKUDS, contains an unauthenticated remote code execution vulnerability in its TCP server component. The server binds to all network interfaces by default and accepts commands from any connecting client without authentication. Commands are executed as root.
The flaw affects AutoAgent installations exposed to untrusted networks. Default deployments are vulnerable without network-level controls. Check the GitHub advisory for the fixed version. Apply the patch or restrict TCP access to trusted sources via firewall rules if the patched version is not yet available.
