EUVD-2026-4942

Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the UserConfigController allows any remote user to overwrite the system's docker-compose.yml configuration file. By exploiting insecure URN...

Runtipi Access Control Vulnerability

Runtipi is an open-source family server orchestrator developed by Runtipi. Versions of Runtipi prior to 4.7.2 contained a access control vulnerability caused by unauthorized path traversal. This vulnerability could allow for overwriting of the docker-compose.yml configuration file, leading to...

PT-2023-25876 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue arises from the use of a different docker-compose.yml file when running Auto-GPT by cloning the git repo and executing docker compose run auto-gpt in the repo root. This file mounts itse...