CVE-2024-8156

CVE-2024-8156 is a critical command injection vulnerability in the workflow-checker.yml workflow of significant-gravitas/autogpt, affecting all versions of agpt and autogpt_classic. An attacker can exploit this by crafting a malicious branch name in a pull request, leading to arbitrary command execution. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for severe impacts such as reverse shell access and theft of sensitive credentials. While no active exploitation, public exploit code, or significant community discussion has been observed, its high FAUCET Risk Score of 89/100 indicates a substantial threat.