CVE-2026-86124 Details

A remote code execution vulnerability has been identified in AutoAgent versions through 16c12b052ef2330a198063c62a07a7f9723031e3. The vulnerability resides in a TCP server that operates without authentication, executing commands provided by attackers as root. This server binds to all network interfaces and is accessible from the host's network. The issue arises because the Docker container running AutoAgent mounts the host's workspace directory, allowing executed commands to read from and write to the host's files.

To address this vulnerability, it is recommended to bind the container's communication port to '127.0.0.1' instead of '0.0.0.0', require authentication for command execution, avoid running the container as root, and refrain from using 'shell=True' when executing commands. These measures should also be applied to the FastAPI server that AutoAgent can expose.