Low severity · published Apr 14, 2025
CVE-2025-31494
AutoGPT allows cross-user sharing of node execution results through WebSockets API
3.5
CVSS
0.4%
EPSS
No
On KEV
Description
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The AutoGPT Platform's WebSocket API transmitted node execution updates to subscribers based on the graph_id+graph_version. Additionally, there was no check prohibiting users from subscribing with another user's graph_id+graph_version. As a result, node execution updates from one user's graph execution could be received by another user within the same instance. This vulnerability does not occur between different instances or between users and non-users of the platform. Single-user instances are not affected. In private instances with a user white-list, the impact is limited by the fact that all potential unintended recipients of these node execution updates must have been admitted by the administrator. This vulnerability is fixed in 0.6.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
AutoGPT · Significant-Gravitas
< 0.6.1 · source: vendor
AP
Autogpt Platform · Agpt
before 0.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31494
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31494
Issue Tracking
https://github.com/Significant-Gravitas/AutoGPT/pull/9660
Release Notes
https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.1
Patch
https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-958f-37vw-jx8f
More from AutoGPT
9.8
CVE-2025-62616
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
9.8
CVE-2025-62615
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
9.8
CVE-2024-6091
Shell Command Denylist Bypass in significant-gravitas/autogpt
9.8
CVE-2024-1881
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
8.8
CVE-2026-55237
AutoGPT SignUp Page has DOM-Based XSS and Open Redirect
