AG
Vendor
Agpt
23
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-32425 | AP Autogpt Platform Agpt | 5.5 | May 13 | AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS |
| CVE-2026-26020 | AP Autogpt Platform Agpt | 8.8 | Feb 12 | AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) |
| CVE-2026-26006 | AP Autogpt Platform Agpt | 6.5 | Feb 10 | Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt |
| CVE-2025-32393 | AP Autogpt Platform Agpt | 6.5 | Feb 5 | AutoGPT has a DoS vulnerability in ReadRSSFeedBlock |
| CVE-2025-62616 | AP Autogpt Platform Agpt | 9.8 | Feb 4 | AutoGPT has SSRF vulnerability in SendDiscordFileBlock |
| CVE-2025-62615 | AP Autogpt Platform Agpt | 9.8 | Feb 4 | AutoGPT has SSRF vulnerability in ReadRSSFeedBlock |
| CVE-2026-22038 | AP Autogpt Platform Agpt | 8.1 | Feb 4 | AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks |
| CVE-2026-24780 | AP Autogpt Platform Agpt | 8.8 | Jan 29 | AutoGPT is Vulnerable to RCE via Disabled Block Execution |
| CVE-2025-53944 | AP Autogpt Platform Agpt | 7.7 | Jul 30 | AutoGPT Platform Exposes Graph Execution Results via Authorization Gap |
| CVE-2025-31494 | AP Autogpt Platform Agpt | 3.5 | Apr 14 | AutoGPT allows cross-user sharing of node execution results through WebSockets API |
| CVE-2025-31491 | AP Autogpt Platform Agpt | 8.6 | Apr 14 | AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect |
| CVE-2025-31490 | AP Autogpt Platform Agpt | 7.5 | Apr 14 | AutoGPT allows SSRF due to DNS Rebinding in requests wrapper |
| CVE-2025-0454 | AP Autogpt Platform Agpt | 7.5 | Mar 20 | SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt |
| CVE-2025-1040 | AP Autogpt Platform Agpt | 8.8 | Mar 20 | Server-Side Template Injection (SSTI) in significant-gravitas/autogpt |
| CVE-2024-8156 | AC Autogpt Classic Agpt | 9.8 | Mar 20 | Command Injection in significant-gravitas/autogpt |
| CVE-2025-22603 | AP Autogpt Platform Agpt | 8.1 | Mar 10 | AutoGPT SSRF vulnerability |
| CVE-2024-6091 | AC Autogpt Classic Agpt | 9.8 | Sep 11 | Shell Command Denylist Bypass in significant-gravitas/autogpt |
| CVE-2024-1880 | AC Autogpt Classic Agpt | 7.8 | Jun 6 | OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt |
| CVE-2024-1881 | AC Autogpt Classic Agpt | 9.8 | Jun 6 | Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt |
| CVE-2024-1879 | AC Autogpt Classic Agpt | 8.8 | Jun 6 | CSRF to RCE in significant-gravitas/autogpt |
| CVE-2023-37275 | AC Autogpt Classic Agpt | 4.3 | Jul 13 | System logs spoofable in Auto-GPT via ANSI control sequences |
| CVE-2023-37274 | AC Autogpt Classic Agpt | 7.8 | Jul 13 | Python code execution sandbox escape in non-docker version in Auto-GPT |
| CVE-2023-37273 | AC Autogpt Classic Agpt | 8.8 | Jul 13 | Docker escape in Auto-GPT when running from docker-compose.yml included in git repo |