Autogpt

This hub aggregates every CVE we track for Autogpt, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Autogpt.

• CVE-2026-72922AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification8.2Aug 11, 2026
• CVE-2026-56663AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access8.5Jun 26, 2026
• CVE-2026-56823AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering5.4Jun 26, 2026
• CVE-2026-33235AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features7.7Jun 24, 2026
• CVE-2026-55237AutoGPT SignUp Page has DOM-Based XSS and Open Redirect8.8Jun 18, 2026
• CVE-2026-45023AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute5.4May 28, 2026
• CVE-2026-33234AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server5.0May 19, 2026
• CVE-2026-33233AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries7.6May 19, 2026
• CVE-2026-33232AutoGPT: Unauthenticated DoS via Disk Space Exhaustion7.5May 19, 2026
• CVE-2026-30950AutoGPT has Authenticated Session Hijacking via IDOR7.1May 18, 2026
• CVE-2025-32425AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS5.5May 13, 2026
• CVE-2026-26020AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)8.8Feb 12, 2026
• CVE-2026-26006Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt6.5Feb 10, 2026
• CVE-2025-32393AutoGPT has a DoS vulnerability in ReadRSSFeedBlock6.5Feb 5, 2026
• CVE-2025-62616AutoGPT has SSRF vulnerability in SendDiscordFileBlock9.8Feb 4, 2026