Five Open-Source AI Agent Platforms Hand a Shell to Anyone Who Can Reach Them or Feed Them Text
Six CVEs in DB-GPT, Langchain-Chatchat, EvoScientist, LangAlpha and OpenSRE let unauthenticated callers or injected text reach a shell. Only one has a fix.
· 6 min