Skip to contentSignificant-gravitas Autogpt vulnerabilities
- significant-gravitas autogptAutoGPT: Webhook provider path confusion bypasses generic webhook secret verificationCVE-2026-729228.2 High
- significant-gravitas autogptAutoGPT: There is a DoS vulnerability in AITextSummarizerBlockCVE-2025-323945.3 Medium
- significant-gravitas autogptAutoGPT: There is a DoS vulnerability in ExtractTextInformationBlockCVE-2025-324235.3 Medium
- significant-gravitas autogptAutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` accessCVE-2026-566638.5 High
- significant-gravitas autogptAutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping TriggeringCVE-2026-568235.4 Medium
- significant-gravitas autogptAutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating featuresCVE-2026-332357.7 High
- significant-gravitas autogptAutoGPT SignUp Page has DOM-Based XSS and Open RedirectCVE-2026-552378.8 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in MediaDurationBlockCVE-2025-324378.7 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in AddAudioToVideoBlockCVE-2025-324367.1 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in ScreenshotWebPageBlockCVE-2025-324248.7 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlockCVE-2025-324228.7 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in LoopVideoBlockCVE-2025-323928.7 High
- significant-gravitas autogptAutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/executeCVE-2026-450235.4 Medium
- significant-gravitas autogptAutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP serverCVE-2026-33234Public exploit5.0 Medium
- significant-gravitas autogptAutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache EntriesCVE-2026-332337.6 High
- significant-gravitas autogptAutoGPT: Unauthenticated DoS via Disk Space ExhaustionCVE-2026-332327.5 High
- significant-gravitas autogptAutoGPT has Authenticated Session Hijacking via IDORCVE-2026-30950Public exploit7.1 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoSCVE-2025-324255.1 Medium
- significant-gravitas autogptAuthentication bypass in AutoGPT de ThesamurCVE-2025-410236.9 Medium
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)CVE-2026-260209.4 Critical
- significant-gravitas autogpt, agpt autogpt platform +1 moreRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptCVE-2026-260066.5 Medium
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has a DoS vulnerability in ReadRSSFeedBlockCVE-2025-323938.7 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has SSRF vulnerability in SendDiscordFileBlockCVE-2025-626169.3 Critical
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has SSRF vulnerability in ReadRSSFeedBlockCVE-2025-626159.3 Critical
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration BlocksCVE-2026-22038Public exploit8.1 High
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT is Vulnerable to RCE via Disabled Block ExecutionCVE-2026-247808.6 High
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT Platform Exposes Graph Execution Results via Authorization GapCVE-2025-539447.7 High
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT allows cross-user sharing of node execution results through WebSockets APICVE-2025-314943.5 Low
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT allows leakage of cross-domain cookies and protected headers in requests redirectCVE-2025-314918.6 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT allows SSRF due to DNS Rebinding in requests wrapperCVE-2025-314907.5 High
- significant-gravitas significant-gravitas/autogptSSRF Vulnerabilities in significant-gravitas/autogptCVE-2024-104576.5 Medium
- significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 moreSSRF Check Bypass in Requests Utility in significant-gravitas/autogptCVE-2025-04547.5 High
- significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 moreServer-Side Template Injection (SSTI) in significant-gravitas/autogptCVE-2025-10408.8 High
- significant-gravitas significant-gravitas/autogpt, agpt autogpt classic +1 moreCommand Injection in significant-gravitas/autogptCVE-2024-81568.8 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT SSRF vulnerabilityCVE-2025-226037.7 High
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreShell Command Denylist Bypass in significant-gravitas/autogptCVE-2024-60919.8 Critical
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreOS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogptCVE-2024-18807.8 High
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreImproper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogptCVE-2024-18818.8 High
- significant-gravitas autogpt, significant-gravitas/autogpt, agpt autogpt classic +2 moreCSRF to RCE in significant-gravitas/autogptCVE-2024-18798.8 High