Unauthenticated Command Execution in Archon AI Coding Agent

Executive Summary

Archon versions 0.2.13 through 0.11.1 have a missing authentication vulnerability. This flaw allows unauthenticated attackers to access the /api/* control API, which is bound to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.

Useful 0 Not Useful 0

Detection Guidance

Check if Archon is running on your system by inspecting processes for 'Archon' or related services. Use network scanning tools like nmap to detect if the /api/* endpoint is exposed on port 0.0.0.0. Example command: nmap -p- --script http-api <target-ip>. Verify if unauthenticated requests to /api/* return valid responses.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to remotely execute arbitrary commands on the host system with the privileges of the Archon user. This could lead to full system compromise, data theft, or further network infiltration if the Archon service has elevated permissions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and control of systems, violating data confidentiality and integrity requirements in GDPR and HIPAA. It may result in data breaches, unauthorized data access, or system manipulation, leading to non-compliance with these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade Archon to a patched version if available. If not, restrict network access to the Archon service by binding it to localhost (127.0.0.1) instead of 0.0.0.0. Use firewalls to block external access to the /api/* endpoint. Disable or remove Archon if unused.

Useful 0 Not Useful 0