TencentCloudADP/youtu-agent v0.1.4

on GitHub

Security fix

Fixes an unauthenticated remote code execution in the WebUI (WebUIAgents), reported through CNVD. All users who expose the WebUI beyond localhost (including the official Docker setup) should upgrade.

• switch_agent only loads agent configs listed by list_agents (configs/agents/{examples,simple,orchestra,orchestrator,generated}/*.yaml).
• /ws and /upload only accept same-origin requests; add more with UTU_WEBUI_ALLOWED_ORIGINS.
• Uploaded filenames are confined to the workspace; uploads are size limited.
• New access token UTU_WEBUI_TOKEN: open http://<host>:<port>/?token=<token> once, the browser keeps it in an HttpOnly cookie.

Breaking change

On a non-loopback address (e.g. UTU_WEBUI_IP=0.0.0.0, as in Docker) the WebUI now refuses to start without UTU_WEBUI_TOKEN. Add it to your .env (e.g. openssl rand -hex 32), or set UTU_WEBUI_ALLOW_INSECURE=true only if an authenticating reverse proxy already protects the service. Docker users need to rebuild the image.