Significant-gravitas vulnerabilities

Products

• Autogpt 35
• Significant-gravitas/autogpt 8
• Auto-gpt 3

Newest

• significant-gravitas autogpt AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification CVE-2026-72922 8.2 HighAugust 11, 2026
• significant-gravitas autogpt AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock CVE-2025-32394 5.3 MediumJune 26, 2026
• significant-gravitas autogpt AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock CVE-2025-32423 5.3 MediumJune 26, 2026
• significant-gravitas autogpt AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access CVE-2026-56663 8.5 HighJune 26, 2026
• significant-gravitas autogpt AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering CVE-2026-56823 5.4 MediumJune 26, 2026
• significant-gravitas autogpt AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features CVE-2026-33235 7.7 HighJune 24, 2026
• significant-gravitas autogpt AutoGPT SignUp Page has DOM-Based XSS and Open Redirect CVE-2026-55237 8.8 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT has a DoS vulnerability in MediaDurationBlock CVE-2025-32437 8.7 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT has a DoS vulnerability in AddAudioToVideoBlock CVE-2025-32436 7.1 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock CVE-2025-32424 8.7 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock CVE-2025-32422 8.7 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT has a DoS vulnerability in LoopVideoBlock CVE-2025-32392 8.7 HighJune 18, 2026
• significant-gravitas autogpt AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute CVE-2026-45023 5.4 MediumMay 28, 2026
• significant-gravitas autogpt AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server CVE-2026-33234 Public exploit 5.0 MediumMay 19, 2026
• significant-gravitas autogpt AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries CVE-2026-33233 7.6 HighMay 19, 2026
• significant-gravitas autogpt AutoGPT: Unauthenticated DoS via Disk Space Exhaustion CVE-2026-33232 7.5 HighMay 19, 2026
• significant-gravitas autogpt AutoGPT has Authenticated Session Hijacking via IDOR CVE-2026-30950 Public exploit 7.1 HighMay 18, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS CVE-2025-32425 5.1 MediumMay 13, 2026
• significant-gravitas autogpt Authentication bypass in AutoGPT de Thesamur CVE-2025-41023 6.9 MediumFebruary 19, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) CVE-2026-26020 9.4 CriticalFebruary 12, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt CVE-2026-26006 6.5 MediumFebruary 10, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT has a DoS vulnerability in ReadRSSFeedBlock CVE-2025-32393 8.7 HighFebruary 5, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT has SSRF vulnerability in SendDiscordFileBlock CVE-2025-62616 9.3 CriticalFebruary 4, 2026
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT has SSRF vulnerability in ReadRSSFeedBlock CVE-2025-62615 9.3 CriticalFebruary 4, 2026
• agpt autogpt platform, significant-gravitas autogpt +1 more AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks CVE-2026-22038 Public exploit 8.1 HighFebruary 4, 2026
• agpt autogpt platform, significant-gravitas autogpt +1 more AutoGPT is Vulnerable to RCE via Disabled Block Execution CVE-2026-24780 8.6 HighJanuary 29, 2026
• agpt autogpt platform, significant-gravitas autogpt +1 more AutoGPT Platform Exposes Graph Execution Results via Authorization Gap CVE-2025-53944 7.7 HighJuly 30, 2025
• agpt autogpt platform, significant-gravitas autogpt +1 more AutoGPT allows cross-user sharing of node execution results through WebSockets API CVE-2025-31494 3.5 LowApril 14, 2025
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect CVE-2025-31491 8.6 HighApril 14, 2025
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT allows SSRF due to DNS Rebinding in requests wrapper CVE-2025-31490 7.5 HighApril 14, 2025
• significant-gravitas significant-gravitas/autogpt SSRF Vulnerabilities in significant-gravitas/autogpt CVE-2024-10457 6.5 MediumMarch 20, 2025
• significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 more SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt CVE-2025-0454 7.5 HighMarch 20, 2025
• significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 more Server-Side Template Injection (SSTI) in significant-gravitas/autogpt CVE-2025-1040 8.8 HighMarch 20, 2025
• significant-gravitas significant-gravitas/autogpt, agpt autogpt classic +1 more Command Injection in significant-gravitas/autogpt CVE-2024-8156 8.8 HighMarch 20, 2025
• significant-gravitas autogpt, agpt autogpt platform +1 more AutoGPT SSRF vulnerability CVE-2025-22603 7.7 HighMarch 10, 2025
• significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more Shell Command Denylist Bypass in significant-gravitas/autogpt CVE-2024-6091 9.8 CriticalSeptember 11, 2024
• significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt CVE-2024-1880 7.8 HighJune 6, 2024
• significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt CVE-2024-1881 8.8 HighJune 6, 2024
• significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 more CSRF to RCE in significant-gravitas/autogpt CVE-2024-1879 8.8 HighJune 6, 2024
• significant-gravitas auto-gpt, agpt autogpt classic +1 more System logs spoofable in Auto-GPT via ANSI control sequences CVE-2023-37275 3.1 LowJuly 13, 2023
• significant-gravitas auto-gpt, agpt autogpt classic +1 more Python code execution sandbox escape in non-docker version in Auto-GPT CVE-2023-37274 7.6 HighJuly 13, 2023
• significant-gravitas auto-gpt, agpt autogpt classic +1 more Docker escape in Auto-GPT when running from docker-compose.yml included in git repo CVE-2023-37273 Public exploit 8.1 HighJuly 13, 2023