CVE-2026-86124

AutoAgent (HKUDS/AutoAgent) contains an unauthenticated remote code execution vulnerability in its sandbox TCP server , which binds to all network interfaces. An attacker who can reach the exposed communication port can execute arbitrary bash commands as root inside the container, gaining access ...

CVE-2026-86124 AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server

AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining acces...