CVE-2026-56663— AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56663
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
Source: NVD (National Vulnerability Database)
Vulnerability Description
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. _is_ip_blocked() in backend/backend/util/request.py does not normalize IPv4-mapped IPv6 addresses before checking resolved IPs against the blocked IPv4 ranges, and does not block special-use ranges such as 100.64.0.0/10 (CGNAT, RFC 6598). A hostname that resolves to an IPv4-mapped IPv6 address therefore passes validation and the request reaches the embedded internal IPv4 endpoint. This affects all AutoGPT Platform deployments. This vulnerability is fixed in 0.6.52.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
服务端请求伪造(SSRF)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Significant-Gravitas | AutoGPT | < 0.6.52 | - |
II. Public POCs for CVE-2026-56663
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56663
请登录查看更多情报信息。
Other References for CVE-2026-56663 (1)
Same Patch Batch · Significant-Gravitas · 2026-06-26 · 4 CVEs total
| CVE-2026-56823 | 5.4 MEDIUM | AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering |
| CVE-2025-32394 | AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock | |
| CVE-2025-32423 | AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock |
IV. Related Vulnerabilities
Same product: AutoGPT
- CVE-2025-32394
AutoGPT: There is a DoS vulnerability in AITextSummarizerBlo - CVE-2025-32423
AutoGPT: There is a DoS vulnerability in ExtractTextInformat - CVE-2026-56823
AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration an - CVE-2026-33235
AutoGPT: Denial of Service (DoS) via Resource Exhaustion in - CVE-2026-55237
AutoGPT SignUp Page has DOM-Based XSS and Open Redirect
Same vendor: Significant-Gravitas
- CVE-2025-32394
AutoGPT: There is a DoS vulnerability in AITextSummarizerBlo - CVE-2025-32423
AutoGPT: There is a DoS vulnerability in ExtractTextInformat - CVE-2026-56823
AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration an - CVE-2026-33235
AutoGPT: Denial of Service (DoS) via Resource Exhaustion in - CVE-2026-55237
AutoGPT SignUp Page has DOM-Based XSS and Open Redirect
Same weakness: CWE-918
- CVE-2026-28385
SSRF via image import from URL allows internal network probi - CVE-2026-57627
WordPress Kirki plugin <= 6.0.11 - Server Side Request Forge - CVE-2026-56026
WordPress utm.codes plugin <= 1.9.0 - Server Side Request Fo - CVE-2026-4339
SSRF via unvalidated attachment URLs in Mattermost Agents pl - CVE-2026-57940
HTMLy 3.1.1 RSS导入SSRF漏洞
V. Comments for CVE-2026-56663
No comments yet