Agions taskflow-ai terminal_execute handlers.ts 操作系统命令注入

Agions taskflow-ai 在 2.1.8 及更早版本中发现了一个命令注入漏洞。该漏洞位于 src/mcp/server/handlers.ts 文件中的 terminal_execute 组件。攻击者可以通过操纵未知函数输入来利用此漏洞，从而在底层系统上执行任意操作系统命令。此漏洞的严重程度评分为 CVSS 6.3，表明存在中等风险。成功利用可能导致系统被攻陷、数据被盗或拒绝服务。为了保护您的系统，解决此漏洞至关重要。

Organizations deploying taskflow-ai in production environments, particularly those with internet-facing deployments, are at risk. Environments where user input is directly incorporated into system commands without proper sanitization are especially vulnerable. Shared hosting environments utilizing taskflow-ai should be prioritized for patching.

• nodejs: Monitor process execution for suspicious commands originating from the taskflow-ai process.

Get-Process taskflow-ai | Select-Object -ExpandProperty CommandLine | Select-String -Pattern "[a-zA-Z]:\"

• linux / server: Examine system logs for unusual command executions related to the taskflow-ai process.

journalctl -u taskflow-ai | grep -i 'command injection'

• generic web: Check access logs for requests containing suspicious characters or patterns that could be indicative of command injection attempts.

grep -i 'command injection' /var/log/apache2/access.log

1. 2026-04-08Disclosure

   disclosure

1. 已保留2026-04-08
2. 发布日期2026-04-08
3. 修改日期2026-04-10
4. EPSS 更新日期2026-04-16

建议的解决方案是将 taskflow-ai 升级到 2.1.9 或更高版本。此版本包含一个特定的修复程序（commit c1550b445b9f24f38c4414e9a545f5f79f23a0fe），可减轻操作系统命令注入漏洞。在升级之前，建议备份您的配置和数据。如果无法立即升级，请考虑实施额外的安全措施，例如限制对 terminal_execute 组件的访问以及监控可疑活动。供应商已联系并非常积极地做出响应。