AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining access to bind-mounted host workspace directories.

AutoAgent contains a critical unauthenticated remote code execution vulnerability in its TCP server component. The server binds to all network interfaces without requiring authentication, allowing attackers to connect to the exposed port and execute arbitrary bash commands. Commands are executed with root privileges within the container environment. The vulnerability also exposes bind-mounted host workspace directories, potentially extending the impact beyond the container. Attackers can exploit this by simply connecting to the communication port and supplying arbitrary commands. The issue is documented in the AutoAgent GitHub repository and has been assigned CVE-2026-86124. A VulnCheck advisory also covers this vulnerability in detail.