Hackingbuddygpt
Monthly
OS command injection in HackingBuddyGPT up to version 0.5.0 allows a remote low-privileged attacker to execute arbitrary commands on the host running the tool by manipulating input processed by the `ssh_run_command` function in `src/hackingBuddyGPT/extensions/ssh_run_command.py`. The function fails to sanitize shell metacharacters before constructing and executing SSH commands, creating a classic CWE-78 unsanitized-input-to-shell scenario. A publicly available proof-of-concept exploit exists (GitHub issue #150), and the maintainer has not responded to the disclosure; no patch has been released as of this analysis.
OS command injection in HackingBuddyGPT up to version 0.5.0 allows a remote low-privileged attacker to execute arbitrary commands on the host running the tool by manipulating input processed by the `ssh_run_command` function in `src/hackingBuddyGPT/extensions/ssh_run_command.py`. The function fails to sanitize shell metacharacters before constructing and executing SSH commands, creating a classic CWE-78 unsanitized-input-to-shell scenario. A publicly available proof-of-concept exploit exists (GitHub issue #150), and the maintainer has not responded to the disclosure; no patch has been released as of this analysis.