CVE-2026-86124

CRITICAL 9.8

AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.

CWE	CWE-306
Vendor	hkuds
Product	autoagent
Published	Sep 5, 2026

Stay Ahead of the Next One

Get instant alerts for hkuds autoagent

Be the first to know when new critical vulnerabilities affecting hkuds autoagent are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

HKUDS / AutoAgent

0 ≤ 16c12b052ef2330a198063c62a07a7f9723031e3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/HKUDS/AutoAgent/issues/96 github.com: https://github.com/HKUDS/AutoAgent/blob/16c12b052ef2330a198063c62a07a7f9723031e3/autoagent/environment/tcp_server.py github.com: https://github.com/HKUDS/AutoAgent/blob/16c12b052ef2330a198063c62a07a7f9723031e3/autoagent/environment/docker_env.py github.com: https://github.com/HKUDS/AutoAgent vulncheck.com: https://www.vulncheck.com/advisories/autoagent-unauthenticated-remote-code-execution-via-the-sandbox-tcp-command-server

Credits

🔍 George Chen