Vulnerabilities

TI-2025-23496 CVE-2025-32425

AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS

LOW 22

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00182 Published 2026-05-13 Fixed in 0.6.32 CWE-770

TI-2026-21034 CVE-2026-26020

AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (import)

MEDIUM 43

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00571 Published 2026-02-12 Fixed in 0.6.48 CWE-285

TI-2026-21020 CVE-2026-26006

Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt

MEDIUM 62

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00525 Published 2026-02-10 Fixed in 0.6.32 CWE-1333

TI-2025-23471 CVE-2025-32393

AutoGPT has a DoS vulnerability in ReadRSSFeedBlock

HIGH 77

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2026-02-05 No fix listed CWE-770

TI-2025-38831 CVE-2025-62616

AutoGPT has SSRF vulnerability in SendDiscordFileBlock

MEDIUM 48

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00402 Published 2026-02-04 No fix listed CWE-918

TI-2025-38830 CVE-2025-62615

AutoGPT has SSRF vulnerability in ReadRSSFeedBlock

MEDIUM 48

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00424 Published 2026-02-04 No fix listed CWE-918

TI-2026-17732 CVE-2026-22038

AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

LOW 36

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00487 Published 2026-02-04 No fix listed CWE-532

TI-2026-19981 CVE-2026-24780 · GHSA-r277-3xc5-c79v

AutoGPT is Vulnerable to RCE via Disabled Block Execution

HIGH 78

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.01257 Published 2026-01-29 Fixed in 0.6.44 CWE-276

TI-2025-33809 CVE-2025-53944

AutoGPT Platform Exposes Graph Execution Results via Authorization Gap

HIGH 67

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00536 Published 2025-07-30 Fixed in 0.6.16 CWE-285

TI-2025-22675 CVE-2025-31494

AutoGPT allows cross-user sharing of node execution results through WebSockets API

LOW 17

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00399 Published 2025-04-14 Fixed in 0.6.1 CWE-200

TI-2025-22672 CVE-2025-31491

AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect

HIGH 76

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00493 Published 2025-04-14 Fixed in 0.6.1 CWE-200

TI-2025-22671 CVE-2025-31490

AutoGPT allows SSRF due to DNS Rebinding in requests wrapper

HIGH 72

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00512 Published 2025-04-14 Fixed in 0.6.1 CWE-918

TI-2025-00371 CVE-2025-0454 · GHSA-jg5r-v2h9-wfxx

SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

HIGH 72

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-03-20 Fixed in v0.4.0 CWE-918

TI-2025-00879 CVE-2025-1040 · GHSA-cjjc-mf84-xp9f

Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

HIGH 73

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01746 Published 2025-03-20 Fixed in v0.4.0 CWE-1336

TI-2025-16489 CVE-2025-22603

AutoGPT SSRF vulnerability

HIGH 73

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00578 Published 2025-03-10 No fix listed CWE-918

Vulnerabilities

Filters