Significant-Gravitas

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Significant-Gravitas records in CISA KEV

No Significant-Gravitas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Autogpt Platform 15 records HIGH Autogpt Classic 8 records HIGH

Records

8 records in Autogpt Classic · all components

TI-2024-05646 CVE-2024-6091 · GHSA-g84q-54hf-36rg

Shell Command Denylist Bypass in significant-gravitas/autogpt

HIGH 82

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2024-09-11 Fixed in 0.5.1 CWE-78

TI-2024-07563 CVE-2024-8156 · GHSA-rrfw-qqmx-gqwx

Command Injection in significant-gravitas/autogpt

HIGH 76

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01742 Published 2025-03-20 Fixed in 0.5.1 CWE-77

TI-2024-01750 CVE-2024-1881 · GHSA-rr88-j2r8-3xpc

Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt

HIGH 76

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01427 Published 2024-06-06 Fixed in 5.1.0 CWE-78

TI-2024-01748 CVE-2024-1879 · GHSA-wwg8-x274-5x5g

CSRF to RCE in significant-gravitas/autogpt

HIGH 73

A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0052 Published 2024-06-06 Fixed in 5.1 CWE-352

TI-2024-01749 CVE-2024-1880 · GHSA-rf3r-wjj9-3842

OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt

HIGH 69

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01017 Published 2024-06-06 Fixed in 5.1.0 CWE-78

TI-2023-18903 CVE-2023-37273

Docker escape in Auto-GPT when running from docker-compose.yml included in git repo

MEDIUM 40

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00358 Published 2023-07-13 Fixed in 0.4.3 CWE-94

TI-2023-18904 CVE-2023-37274

Python code execution sandbox escape in non-docker version in Auto-GPT

LOW 36

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00352 Published 2023-07-13 Fixed in 0.4.3 CWE-94

TI-2023-18905 CVE-2023-37275

System logs spoofable in Auto-GPT via ANSI control sequences

LOW 20

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00436 Published 2023-07-13 Fixed in 0.4.3 CWE-117

Open these records in search →

Critical	6
High	25
Medium	9
Low	1
No CVSS	0