Significant-Gravitas

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Significant-Gravitas records in CISA KEV

No Significant-Gravitas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Autogpt Platform 15 records HIGH Autogpt Classic 8 records HIGH

Records

41 records

TI-2024-05646 CVE-2024-6091 · GHSA-g84q-54hf-36rg

Shell Command Denylist Bypass in significant-gravitas/autogpt

HIGH 82

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2024-09-11 Fixed in 0.5.1 CWE-78

TI-2026-19981 CVE-2026-24780 · GHSA-r277-3xc5-c79v

AutoGPT is Vulnerable to RCE via Disabled Block Execution

HIGH 78

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.01257 Published 2026-01-29 Fixed in 0.6.44 CWE-276

TI-2025-23508 CVE-2025-32437

AutoGPT has a DoS vulnerability in MediaDurationBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23495 CVE-2025-32424

AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23493 CVE-2025-32422

AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23471 CVE-2025-32393

AutoGPT has a DoS vulnerability in ReadRSSFeedBlock

HIGH 77

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2026-02-05 No fix listed CWE-770

TI-2025-23470 CVE-2025-32392

AutoGPT has a DoS vulnerability in LoopVideoBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00426 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-22672 CVE-2025-31491

AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect

HIGH 76

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00493 Published 2025-04-14 Fixed in 0.6.1 CWE-200

TI-2024-07563 CVE-2024-8156 · GHSA-rrfw-qqmx-gqwx

Command Injection in significant-gravitas/autogpt

HIGH 76

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01742 Published 2025-03-20 Fixed in 0.5.1 CWE-77

TI-2024-01750 CVE-2024-1881 · GHSA-rr88-j2r8-3xpc

Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt

HIGH 76

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01427 Published 2024-06-06 Fixed in 5.1.0 CWE-78

TI-2026-51138 CVE-2026-72922

AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

HIGH 75

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00476 Published 2026-08-11 Fixed in 0.6.70 CWE-287

TI-2025-16489 CVE-2025-22603

AutoGPT SSRF vulnerability

HIGH 73

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00578 Published 2025-03-10 No fix listed CWE-918

TI-2025-00879 CVE-2025-1040 · GHSA-cjjc-mf84-xp9f

Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

HIGH 73

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01746 Published 2025-03-20 Fixed in v0.4.0 CWE-1336

TI-2024-01748 CVE-2024-1879 · GHSA-wwg8-x274-5x5g

CSRF to RCE in significant-gravitas/autogpt

HIGH 73

A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0052 Published 2024-06-06 Fixed in 5.1 CWE-352

TI-2026-40847 CVE-2026-56663

AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access

HIGH 72

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00282 Published 2026-06-26 Fixed in 0.6.52 CWE-918

TI-2026-25651 CVE-2026-33232

AutoGPT: Unauthenticated DoS via Disk Space Exhaustion

HIGH 72

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2026-05-19 Fixed in 0.6.52 CWE-400

TI-2025-22671 CVE-2025-31490

AutoGPT allows SSRF due to DNS Rebinding in requests wrapper

HIGH 72

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00512 Published 2025-04-14 Fixed in 0.6.1 CWE-918

TI-2025-00371 CVE-2025-0454 · GHSA-jg5r-v2h9-wfxx

SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

HIGH 72

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-03-20 Fixed in v0.4.0 CWE-918

TI-2026-39914 CVE-2026-55237

AutoGPT SignUp Page has DOM-Based XSS and Open Redirect

HIGH 71

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00229 Published 2026-06-18 Fixed in 0.6.62 CWE-601

TI-2024-01749 CVE-2024-1880 · GHSA-rf3r-wjj9-3842

OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt

HIGH 69

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01017 Published 2024-06-06 Fixed in 5.1.0 CWE-78

TI-2026-25652 CVE-2026-33233

AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries

HIGH 68

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.0023 Published 2026-05-19 Fixed in 0.6.52 CWE-345

TI-2026-25654 CVE-2026-33235

AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features

HIGH 67

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00375 Published 2026-06-24 Fixed in 0.6.52 CWE-400

TI-2025-33809 CVE-2025-53944

AutoGPT Platform Exposes Graph Execution Results via Authorization Gap

HIGH 67

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00536 Published 2025-07-30 Fixed in 0.6.16 CWE-285

TI-2026-23775 CVE-2026-30950

AutoGPT has Authenticated Session Hijacking via IDOR

MEDIUM 64

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-05-18 Fixed in 0.6.51 CWE-862

TI-2025-23507 CVE-2025-32436

AutoGPT has a DoS vulnerability in AddAudioToVideoBlock

MEDIUM 64

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00306 Published 2026-06-18 Fixed in 0.6.63 CWE-400

Open these records in search →