Vulnerabilities

TI-2026-51138 CVE-2026-72922

AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

HIGH 75

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00476 Published 2026-08-11 Fixed in 0.6.70 CWE-287

TI-2025-23472 CVE-2025-32394

AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

MEDIUM 57

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00382 Published 2026-06-26 Fixed in 0.6.32 CWE-405

TI-2025-23494 CVE-2025-32423

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

MEDIUM 57

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00306 Published 2026-06-26 Fixed in 0.6.32 CWE-770

TI-2026-40847 CVE-2026-56663

AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access

HIGH 72

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00282 Published 2026-06-26 Fixed in 0.6.52 CWE-918

TI-2026-40976 CVE-2026-56823

AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering

LOW 24

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0025 Published 2026-06-26 Fixed in 0.6.64 CWE-284

TI-2026-25654 CVE-2026-33235

AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features

HIGH 67

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00375 Published 2026-06-24 Fixed in 0.6.52 CWE-400

TI-2026-39914 CVE-2026-55237

AutoGPT SignUp Page has DOM-Based XSS and Open Redirect

HIGH 71

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00229 Published 2026-06-18 Fixed in 0.6.62 CWE-601

TI-2025-23508 CVE-2025-32437

AutoGPT has a DoS vulnerability in MediaDurationBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23507 CVE-2025-32436

AutoGPT has a DoS vulnerability in AddAudioToVideoBlock

MEDIUM 64

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00306 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23495 CVE-2025-32424

AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23493 CVE-2025-32422

AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2025-23470 CVE-2025-32392

AutoGPT has a DoS vulnerability in LoopVideoBlock

HIGH 77

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00426 Published 2026-06-18 Fixed in 0.6.63 CWE-400

TI-2026-32878 CVE-2026-45023

AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

MEDIUM 58

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00222 Published 2026-05-28 Fixed in 0.6.59 CWE-770

TI-2026-25653 CVE-2026-33234

AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server

MEDIUM 56

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00304 Published 2026-05-19 Fixed in 0.6.52 CWE-918

TI-2026-25652 CVE-2026-33233

AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries

HIGH 68

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.0023 Published 2026-05-19 Fixed in 0.6.52 CWE-345

TI-2026-25651 CVE-2026-33232

AutoGPT: Unauthenticated DoS via Disk Space Exhaustion

HIGH 72

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2026-05-19 Fixed in 0.6.52 CWE-400

TI-2026-23775 CVE-2026-30950

AutoGPT has Authenticated Session Hijacking via IDOR

MEDIUM 64

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-05-18 Fixed in 0.6.51 CWE-862

TI-2025-23496 CVE-2025-32425

AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS

LOW 22

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00182 Published 2026-05-13 Fixed in 0.6.32 CWE-770

TI-2026-21034 CVE-2026-26020

AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (import)

MEDIUM 43

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00558 Published 2026-02-12 Fixed in 0.6.48 CWE-285

TI-2026-21020 CVE-2026-26006

Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt

MEDIUM 62

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00525 Published 2026-02-10 Fixed in 0.6.32 CWE-1333

TI-2025-23471 CVE-2025-32393

AutoGPT has a DoS vulnerability in ReadRSSFeedBlock

HIGH 77

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2026-02-05 No fix listed CWE-770

TI-2025-38831 CVE-2025-62616

AutoGPT has SSRF vulnerability in SendDiscordFileBlock

MEDIUM 48

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00402 Published 2026-02-04 No fix listed CWE-918

TI-2025-38830 CVE-2025-62615

AutoGPT has SSRF vulnerability in ReadRSSFeedBlock

MEDIUM 48

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00424 Published 2026-02-04 No fix listed CWE-918

TI-2026-17732 CVE-2026-22038

AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

LOW 36

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00487 Published 2026-02-04 No fix listed CWE-532

TI-2026-19981 CVE-2026-24780 · GHSA-r277-3xc5-c79v

AutoGPT is Vulnerable to RCE via Disabled Block Execution

HIGH 78

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.01257 Published 2026-01-29 Fixed in 0.6.44 CWE-276

Vulnerabilities

Filters