AU
Product
AutoGPT
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 8Low 1
Watch
Add AutoGPT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26006 | 6.5 | Feb 10 | Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt Affected: >= 0.4.0, < 0.6.32 |
| CVE-2025-32393 | 6.5 | Feb 5 | AutoGPT has a DoS vulnerability in ReadRSSFeedBlock Affected: < autogpt-platform-beta-v0.6.32 |
| CVE-2025-32425 | 5.5 | May 13 | AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS Affected: < 0.6.32 |
| CVE-2026-56823 | 5.4 | Jun 26 | AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering Affected: < 0.6.64 |
| CVE-2026-45023 | 5.4 | May 28 | AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute Affected: < 0.6.59 |
| CVE-2025-32394 | 5.3 | Jun 26 | AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock Affected: < 0.6.32 |
| CVE-2025-32423 | 5.3 | Jun 26 | AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock Affected: < 0.6.32 |
| CVE-2026-33234 | 5.0 | May 19 | AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server Affected: >= 0.1.0, < 0.6.52 |
Showing 8
