cai icon indicating copy to clipboard operation
cai copied to clipboard

`bug_bounter_agent` freezes while scanning vulnerabilities

Open tinvaan opened this issue 6 months ago • 1 comments

I'm trying to run the bug_bounter_agent on a test instance of alpine linux to find vulnerabilities in an OWASP juice shop service running locally.

I have installed tools like nmap and gobuster and I'm using an o1 model (api key provided via OPENAI_API_KEY env var).

The scan prompt is as follows,

CAI> port 3001 runs a vulnerable web service. please find all vulnerabilities in the service. we do not have a shodan API key so DO NOT use `shodan_search` or `shodan_host_info` tools. if any commands are not found or mis
sing, proceed to install the commands and try again.

The cai agent seems to freeze while running the scan. Am I missing anything with my prompts or setup?

Complete logs here.

tinvaan avatar Jul 16 '25 07:07 tinvaan

Hello @tinvaan ! First and foremost, thanks for reporting such a detailed issue. I had the opportunity to look at this ... After reading the full log I can se that the agent is freezing during the curlcommands with long exec times ( 2 times happens for more than 1 min...) It could be a Network Connectivity Issue.

Netwok Verify the service is actually accessible: curl -v --connect-timeout 5 http://127.0.0.1:3001 Check if the service is bound to the correct interface: netstat -tlnp | grep 3001 If running in Docker, ensure proper port mapping and network configuration

On a second note, personally, I haven´t used o1 , but gpt-4o . Can you please change this quickly to discard the possibility that this might be a model issue?

Last but not least, I apologize for the delay. Feel free to share your thoughts

SoyGema avatar Sep 04 '25 08:09 SoyGema

Hello there. It could also be the hardware that you are running the experiment with. If you are willing to share this , we could confirm it

SoyGema avatar Sep 16 '25 05:09 SoyGema

We haven’t been able to reproduce the issue on our side. Please update to the latest version and let us know if you still encounter any problems. Thank you for using CAI!

aliasrobotics-support avatar Oct 28 '25 16:10 aliasrobotics-support