High severity · published Jun 18, 2026
CVE-2026-55237
AutoGPT SignUp Page has DOM-Based XSS and Open Redirect
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scripting (XSS) vulnerability in AutoGPT's signup page. The application improperly trusts a URL parameter (`next`), which is passed to `router.push`. An attacker can craft a malicious link that, when opened by an authenticated user, performs a client-side redirect and executes arbitrary JavaScript in the context of their browser. This could lead to credential theft, internal network pivoting, and unauthorized actions performed on behalf of the victim. Version 0.6.62 patches the issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
AutoGPT · Significant-Gravitas
< 0.6.62 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-55237
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-55237
github.com
https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-j2cp-jg5q-38wj
More from AutoGPT
9.8
CVE-2025-62616
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
9.8
CVE-2025-62615
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
9.8
CVE-2024-6091
Shell Command Denylist Bypass in significant-gravitas/autogpt
9.8
CVE-2024-1881
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
8.8
CVE-2026-26020
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
