CVE-2026-86124: AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to remote exploitation?
Deployments are exposed when the Sandbox TCP command server is reachable over the network. The server binds to all interfaces, so any environment that exposes or routes traffic to its communication port is at risk.
Does exploitation require credentials or user interaction?
No. The vulnerability is unauthenticated and can be exploited remotely with no privileges or user interaction required.
What access can an attacker obtain after exploitation?
An attacker can submit arbitrary bash commands that execute as root inside the container. They can also access host workspace directories that are bind-mounted into that container.
What can be done while a fix is unavailable?
Prevent untrusted networks from reaching the Sandbox TCP communication port. Restrict access to trusted hosts or isolate the service so the port is not externally reachable.