CVE-2026-86124: Missing Authentication for Critical Function in HKUDS AutoAgent
Description
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.
CVSS v4.0
Score 9.3critical
Affected software
HKUDS
AutoAgent
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
HKUDS AutoAgent version 0 contains an unauthenticated remote code execution vulnerability in its TCP server component. The server binds to all network interfaces and executes commands supplied by an attacker without any authentication. Successful exploitation allows an attacker to run arbitrary bash commands with root privileges inside the container, including access to bind-mounted host directories, which could lead to host compromise.
Potential Impact
An attacker can remotely execute arbitrary commands as root within the container, gaining unauthorized access to bind-mounted host workspace directories. This could lead to full container compromise and potential host data exposure or manipulation. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity with high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
No patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the vulnerable TCP server and monitor for unauthorized connections.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-05T01:59:23.830Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9bed75acd9273b49b1c6ae
Added to database: 09/05/2026, 10:22:45 UTC
Last enriched: 09/26/2026, 03:25:42 UTC
Last updated: 10/20/2026, 18:48:24 UTC
Views: 117
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.