AutoGPT has SSRF vulnerability in SendDiscordFileBlock

AutoGPT has SSRF vulnerability in ReadRSSFeedBlock

AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)

AutoGPT is Vulnerable to RCE via Disabled Block Execution

Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect

AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

AutoGPT SSRF vulnerability

AutoGPT Platform Exposes Graph Execution Results via Authorization Gap

AutoGPT allows SSRF due to DNS Rebinding in requests wrapper

SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt

Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt

AutoGPT has a DoS vulnerability in ReadRSSFeedBlock

AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS

AutoGPT allows cross-user sharing of node execution results through WebSockets API