AutoGPT SendEmailBlock SSRF Vulnerability (CVE-2026-33234) Advisory and Fix

Vulnerability Summary: SendEmailBlock SSRF Vulnerability Vulnerability Overview CVE-2026-33234 Severity: 5.0/10 (Moderate) Affected Package: (version >= 0.1.0) Fixed Version: 0.6.52 Core Issue: allows Server-Side Request Forgery (SSRF) via user-controlled SMTP servers, enabling the bypass of IP blacklists. This vulnerability allows attackers to perform port scanning and service fingerprinting on unauthenticated internal networks. Impact Scope 1. Internal Network Port Scanning: Distinguish between open, closed, or filtered ports (e.g., 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, and cloud VPC subnets). 2. Internal Service Fingerprinting: Extract version strings from services such as SSH, Redis, MySQL, PostgreSQL, Memcached, and SMTP. 3. Confirmation of Cloud Metadata Endpoint Reachability: Bypass IP blacklists to connect to 169.254.169.254 (AWS metadata). 4. Enable Lateral Movement: Leverage version information to identify exploitable CVEs within internal services. Remediation It is recommended to apply both of the following options: Option 1: Validate SMTP Server IP before Connection (Recommended) Option 2: Catch Banner Leakage Exceptions (Defense in Depth) Proof of Concept (PoC) Prerequisites: Create a workflow containing a node. Configuration Inputs: : Any internal IP or hostname (e.g., ) : Any port to probe (e.g., ) , , : Any values : Any valid SMTP credential reference After executing the workflow, read the field in the node output to observe the following information leakage:

Goal Reached Thanks to every supporter — we hit 100%!

AutoGPT SendEmailBlock SSRF Vulnerability (CVE-2026-33234) Advisory and Fix

More from this source