Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

AutoGPT — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in AutoGPT, with AI-generated Chinese analysis, references, and POCs.

Vendor: Significant-Gravitas

CVE IDTitleCVSSSeverityPublished
CVE-2025-41023 Authentication bypass in AutoGPT de Thesamur CWE-287 9.8AICriticalAI2026-02-19
CVE-2026-26020 AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) CWE-285 8.8AIHighAI2026-02-12
CVE-2026-26006 Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt CWE-1333 6.5 Medium2026-02-10
CVE-2025-32393 AutoGPT has a DoS vulnerability in ReadRSSFeedBlock CWE-770 6.5AIMediumAI2026-02-05
CVE-2025-62616 AutoGPT has SSRF vulnerability in SendDiscordFileBlock CWE-918 8.1AIHighAI2026-02-04
CVE-2025-62615 AutoGPT has SSRF vulnerability in ReadRSSFeedBlock CWE-918 9.1AICriticalAI2026-02-04
CVE-2026-22038 AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks CWE-532 8.1 High2026-02-04
CVE-2026-24780 AutoGPT is Vulnerable to RCE via Disabled Block Execution CWE-863 8.8AIHighAI2026-01-29
CVE-2025-53944 AutoGPT Platform Exposes Graph Execution Results via Authorization Gap CWE-285 7.7 High2025-07-30
CVE-2025-31494 AutoGPT allows cross-user sharing of node execution results through WebSockets API CWE-200 3.5 Low2025-04-14
CVE-2025-31491 AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect CWE-200 8.6 High2025-04-14
CVE-2025-31490 AutoGPT allows SSRF due to DNS Rebinding in requests wrapper CWE-918 7.5 High2025-04-14
CVE-2025-22603 AutoGPT SSRF vulnerability CWE-918 9.1 -2025-03-10

All 13 known CVE vulnerabilities affecting AutoGPT with full Chinese analysis, references, and POCs where available.