OS Command Injection in 23blocks-OS ai-maestro

Executive Summary

This is an OS command injection vulnerability in the killSessionSync function of 23blocks-OS ai-maestro v0.24.17. Attackers can exploit it by sending a specially crafted input to execute arbitrary commands on the system.

Useful 0 Not Useful 0

Detection Guidance

• Check if your ai-maestro instance is running version 0.24.17 or earlier. If so, it is vulnerable.
• Inspect network traffic for POST requests to /api/agents with agent names containing shell metacharacters like ;, |, &, or $.
• Monitor for unexpected command execution or unusual processes spawned by the ai-maestro service.
• Use curl to test the endpoint: curl -X POST http://<target>:23000/api/agents -d '{"name":"malicious; whoami"}' to see if arbitrary commands execute.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain control of the affected system, steal data, install malware, or disrupt operations. This could lead to unauthorized access, data breaches, or system compromise depending on the system's role and data stored.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations if it results in unauthorized data access, disclosure, or loss. Organizations may face fines, legal penalties, or reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Update 23blocks-OS ai-maestro to the latest version to patch the vulnerability in the killSessionSync function. Review and restrict access to the lib/agent-runtime.ts file. Monitor network traffic for unusual command execution patterns.

Useful 0 Not Useful 0