AI PRP: AutoGPT Exposed API Remote Code Execution

[secureness]

several configurations and setup methods can lead to remote code execution by simply sending an HTTP request.

Ref: https://huntr.com/bounties/1be74477-b338-45f5-a752-b91224994598
setup with docker-compose: https://docs.agpt.co/platform/getting-started/

[secureness]

@tooryx My Main AI PRP is not the priority, I want to ask you to allow me to work on this issue for 3 reasons:

1. it is a RCE
2. the autogpt repository is one of the most popular AI open-source repositories with 171K stars! (https://github.com/Significant-Gravitas/AutoGPT)
3. it have a very simple testbed setup and exploit( only 3 simple curl command can lead to RCE)

I'd like to start working on this ASAP.

[secureness]

Also CC for @maoning

[github-actions]

Welcome to the Tsunami patch reward program!

Your issue has been added to our triage queue and will reviewed
shortly. The panel usually takes a decision once per week, so it
can take up to a week before you hear back from us.

Please, do not start the work until the panel has reached a
decision. Although we always welcome contributions, unapproved
work is not eligible for a reward.

~The Tsunami PRP team

[github-actions]

This message is addressed to the Tsunami panel.

Contributor stats

• The contributor has 0 issues tagged as main;
• The contributor has 0 issues tagged as queue.

Useful links

• All open issues from this contributor
• All open PRs from this contributor

[secureness]

@tooryx Hi
I don't have any main PRP. Could you please check this one?

[tooryx]

Automated message: Do not reply to that comment or tag the author. We just announced a temporary program freeze please see #752 for details. Thank you for your understanding and patience.

[github-actions]

Congratulations, your request has been approved! 🎉

This means that you can start working on this contribution.

❗ Please take a moment to fill the participation form

If you are unsure where to start, we have compiled a set of
useful guides in our documentation:

📖 https://google.github.io/tsunami-security-scanner/howto/

Unfortunately, our documentation is not yet complete for
fingerprints, Python plugins and weak credential detectors. For
these, we recommend looking at existing plugins.

📢 Read latest announcements on GitHub pages

~The Tsunami PRP team