AP
Product
Autogpt Platform
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 3Low 1
Watch
Add Autogpt Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26020 | 8.8 | Feb 12 | AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) Affected: before 0.6.48 |
| CVE-2026-24780 | 8.8 | Jan 29 | AutoGPT is Vulnerable to RCE via Disabled Block Execution Affected: 0.1.0 before 0.6.44 |
| CVE-2025-1040 | 8.8 | Mar 20 | AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE) Affected: before 0.4.0 |
| CVE-2025-31491 | 8.6 | Apr 15 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows Affected: before 0.6.1 |
| CVE-2026-22038 | 8.1 | Feb 4 | AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks Affected: before 0.6.46 |
| CVE-2025-22603 | 8.1 | Mar 10 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows Affected: before 0.4.2 |
| CVE-2025-53944 | 7.7 | Jul 30 | AutoGPT Platform Exposes Graph Execution Results via Authorization Gap Affected: 0.6.13 |
| CVE-2025-31490 | 7.5 | Apr 14 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows Affected: before 0.6.1 |
| CVE-2025-0454 | 7.5 | Mar 20 | A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0 Affected: before 0.4.0 |
Showing 9
