TI-2025-00371 Aliases CVE-2025-0454 GHSA-jg5r-v2h9-wfxx

SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

HIGH 72CWE-918Published 2025-03-20 · Updated 2025-03-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the `urlparse` function from the `urllib.parse` library and the `requests` library. A malicious user can exploit this by submitting a specially crafted URL, such as `http://localhost:\@google.com/../`, to bypass the SSRF check and perform an SSRF attack.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00578 47th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed significant-gravitas/autogpt (significant-gravitas): v0.4.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Significant-Gravitas	significant-gravitas/autogpt	before v0.4.0	v0.4.0	Patch available	CNA

significant-gravitas/autogpt VendorSignificant-Gravitas Affected before v0.4.0 Fixed in v0.4.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:agpt:autogpt_platform::::::::	before 0.4.0	Vulnerable	Significant-Gravitas

cpe:2.3:a:agpt:autogpt_platform:*:*:*:*:*:*:*:* Versions before 0.4.0 Vulnerable ·Significant-Gravitas

Remediation

Fix · CNA significant-gravitas/autogpt (significant-gravitas) Fixed in v0.4.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2025-03-20
significant-gravitas/autogpt v0.4.0
2 records Highest priority Priority HIGH 2 HIGH
Other records, highest priority first
- TI-2025-00879 Server-Side Template Injection (SSTI) in significant-gravitas/autogptPriority HIGH 73
Show all 2 records →

Timeline

2026-10-02 Threatist record created from CVE-2025-0454
2026-10-03 Alias added: GHSA-jg5r-v2h9-wfxx

References

Exploit 1

https://huntr.com/bounties/0664fdee-bdc2-4650-8075-74d7b8d3e308

Patch 1

https://github.com/significant-gravitas/autogpt/commit/ff065cd24c2289878c0abdb9adbf91c305f0d70a

TI-2026-19981 AutoGPT is Vulnerable to RCE via Disabled Block Execution CVSS 4.0HIGH 8.6
TI-2025-23471 AutoGPT has a DoS vulnerability in ReadRSSFeedBlock CVSS 4.0HIGH 8.7
TI-2025-22672 AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect CVSS 3.1HIGH 8.6
TI-2025-16489 AutoGPT SSRF vulnerability CVSS 4.0HIGH 7.7
TI-2025-00879 Server-Side Template Injection (SSTI) in significant-gravitas/autogpt CVSS 3.1HIGH 8.8
TI-2025-22671 AutoGPT allows SSRF due to DNS Rebinding in requests wrapper CVSS 3.1HIGH 7.5

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences