Login Request a demo
AU
Product
AutoGPT
by Significant-Gravitas · last CVE Aug 11, 2026
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities30In the news0Timeline
Severity mix
Critical 2High 19Medium 8Low 1
Severity
All severities30Critical2High19Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add AutoGPT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55237
8.8
0%
Jun 18
AutoGPT SignUp Page has DOM-Based XSS and Open Redirect
Affected: < 0.6.62
CVE-2026-26020
8.8
1%
Feb 12
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
Affected: < 0.6.48
CVE-2026-24780
8.8
1%
Jan 29
AutoGPT is Vulnerable to RCE via Disabled Block Execution
Affected: >= 0.1.0, < 0.6.44
CVE-2025-32437
8.7
0%
Jun 18
AutoGPT has a DoS vulnerability in MediaDurationBlock
Affected: < 0.6.63
CVE-2025-32424
8.7
0%
Jun 18
AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock
Affected: < 0.6.63
CVE-2025-32422
8.7
0%
Jun 18
AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock
Affected: < 0.6.63
CVE-2025-32392
8.7
0%
Jun 18
AutoGPT has a DoS vulnerability in LoopVideoBlock
Affected: < 0.6.63
CVE-2025-31491
8.6
0%
Apr 14
AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect
Affected: < 0.6.1
CVE-2026-56663
8.5
0%
Jun 26
AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
Affected: < 0.6.52
CVE-2026-72922
8.2
0%
Aug 11
AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification
Affected: < 0.6.70
CVE-2026-22038
8.1
0%
Feb 4
AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks
Affected: < autogpt-platform-beta-v0.6.46
CVE-2025-22603
8.1
1%
Mar 10
AutoGPT SSRF vulnerability
Affected: < autogpt-platform-beta-v0.4.2
CVE-2026-33235
7.7
0%
Jun 24
AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features
Affected: >= 0.1.0, < 0.6.52
CVE-2025-53944
7.7
0%
Jul 30
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
Affected: < 0.6.16
CVE-2026-33233
7.6
0%
May 19
AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries
Affected: >= 0.6.34, < 0.6.52
CVE-2026-33232
7.5
0%
May 19
AutoGPT: Unauthenticated DoS via Disk Space Exhaustion
Affected: >= 0.4.2, < 0.6.52
CVE-2025-31490
7.5
1%
Apr 14
AutoGPT allows SSRF due to DNS Rebinding in requests wrapper
Affected: < 0.6.1
CVE-2025-32436
7.1
0%
Jun 18
AutoGPT has a DoS vulnerability in AddAudioToVideoBlock
Affected: < 0.6.63
CVE-2026-30950
7.1
0%
May 18
AutoGPT has Authenticated Session Hijacking via IDOR
Affected: >= 0.6.36, < 0.6.51
Showing 19