Skip to content
Agpt vulnerabilities
Newest
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS
CVE-2025-32425
5.1 Medium
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
CVE-2026-26020
9.4 Critical
-
significant-gravitas autogpt, agpt autogpt platform +1 more
Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt
CVE-2026-26006
6.5 Medium
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT has a DoS vulnerability in ReadRSSFeedBlock
CVE-2025-32393
8.7 High
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
CVE-2025-62616
9.3 Critical
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
CVE-2025-62615
9.3 Critical
-
agpt autogpt platform, significant-gravitas autogpt +1 more
AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks
CVE-2026-22038
Public exploit
8.1 High
-
agpt autogpt platform, significant-gravitas autogpt +1 more
AutoGPT is Vulnerable to RCE via Disabled Block Execution
CVE-2026-24780
8.6 High
-
agpt autogpt platform, significant-gravitas autogpt +1 more
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
CVE-2025-53944
7.7 High
-
agpt autogpt platform, significant-gravitas autogpt +1 more
AutoGPT allows cross-user sharing of node execution results through WebSockets API
CVE-2025-31494
3.5 Low
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect
CVE-2025-31491
8.6 High
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT allows SSRF due to DNS Rebinding in requests wrapper
CVE-2025-31490
7.5 High
-
significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 more
SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt
CVE-2025-0454
7.5 High
-
significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 more
Server-Side Template Injection (SSTI) in significant-gravitas/autogpt
CVE-2025-1040
8.8 High
-
significant-gravitas significant-gravitas/autogpt, agpt autogpt classic +1 more
Command Injection in significant-gravitas/autogpt
CVE-2024-8156
8.8 High
-
significant-gravitas autogpt, agpt autogpt platform +1 more
AutoGPT SSRF vulnerability
CVE-2025-22603
7.7 High
-
significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more
Shell Command Denylist Bypass in significant-gravitas/autogpt
CVE-2024-6091
9.8 Critical
-
significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more
OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt
CVE-2024-1880
7.8 High
-
significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
CVE-2024-1881
8.8 High
-
significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more
CSRF to RCE in significant-gravitas/autogpt
CVE-2024-1879
8.8 High
-
significant-gravitas auto-gpt, agpt autogpt classic +1 more
System logs spoofable in Auto-GPT via ANSI control sequences
CVE-2023-37275
3.1 Low
-
significant-gravitas auto-gpt, agpt autogpt classic +1 more
Python code execution sandbox escape in non-docker version in Auto-GPT
CVE-2023-37274
7.6 High
-
significant-gravitas auto-gpt, agpt autogpt classic +1 more
Docker escape in Auto-GPT when running from docker-compose.yml included in git repo
CVE-2023-37273
Public exploit
8.1 High