SI
Vendor
Significant-Gravitas
34
CVEs
0
On KEV
0
New 30D
Products
AU9.8
AutoGPT
Significant-Gravitas
30 CVEs0 on KEV0 new
SI9.8
significant-gravitas/autogpt
significant-gravitas
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-72922 | AU AutoGPT Significant-Gravitas | 8.2 | Aug 11 | AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification |
| CVE-2025-32394 | AU AutoGPT Significant-Gravitas | 5.3 | Jun 26 | AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock |
| CVE-2025-32423 | AU AutoGPT Significant-Gravitas | 5.3 | Jun 26 | AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock |
| CVE-2026-56663 | AU AutoGPT Significant-Gravitas | 8.5 | Jun 26 | AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access |
| CVE-2026-56823 | AU AutoGPT Significant-Gravitas | 5.4 | Jun 26 | AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering |
| CVE-2026-33235 | AU AutoGPT Significant-Gravitas | 7.7 | Jun 24 | AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features |
| CVE-2026-55237 | AU AutoGPT Significant-Gravitas | 8.8 | Jun 18 | AutoGPT SignUp Page has DOM-Based XSS and Open Redirect |
| CVE-2025-32437 | AU AutoGPT Significant-Gravitas | 8.7 | Jun 18 | AutoGPT has a DoS vulnerability in MediaDurationBlock |
| CVE-2025-32436 | AU AutoGPT Significant-Gravitas | 7.1 | Jun 18 | AutoGPT has a DoS vulnerability in AddAudioToVideoBlock |
| CVE-2025-32424 | AU AutoGPT Significant-Gravitas | 8.7 | Jun 18 | AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock |
| CVE-2025-32422 | AU AutoGPT Significant-Gravitas | 8.7 | Jun 18 | AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock |
| CVE-2025-32392 | AU AutoGPT Significant-Gravitas | 8.7 | Jun 18 | AutoGPT has a DoS vulnerability in LoopVideoBlock |
| CVE-2026-45023 | AU AutoGPT Significant-Gravitas | 5.4 | May 28 | AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute |
| CVE-2026-33234 | AU AutoGPT Significant-Gravitas | 5.0 | May 19 | AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server |
| CVE-2026-33233 | AU AutoGPT Significant-Gravitas | 7.6 | May 19 | AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries |
| CVE-2026-33232 | AU AutoGPT Significant-Gravitas | 7.5 | May 19 | AutoGPT: Unauthenticated DoS via Disk Space Exhaustion |
| CVE-2026-30950 | AU AutoGPT Significant-Gravitas | 7.1 | May 18 | AutoGPT has Authenticated Session Hijacking via IDOR |
| CVE-2025-32425 | AU AutoGPT Significant-Gravitas | 5.5 | May 13 | AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS |
| CVE-2026-26020 | AU AutoGPT Significant-Gravitas | 8.8 | Feb 12 | AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) |
| CVE-2026-26006 | AU AutoGPT Significant-Gravitas | 6.5 | Feb 10 | Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt |
| CVE-2025-32393 | AU AutoGPT Significant-Gravitas | 6.5 | Feb 5 | AutoGPT has a DoS vulnerability in ReadRSSFeedBlock |
| CVE-2025-62616 | AU AutoGPT Significant-Gravitas | 9.8 | Feb 4 | AutoGPT has SSRF vulnerability in SendDiscordFileBlock |
| CVE-2025-62615 | AU AutoGPT Significant-Gravitas | 9.8 | Feb 4 | AutoGPT has SSRF vulnerability in ReadRSSFeedBlock |
| CVE-2026-22038 | AU AutoGPT Significant-Gravitas | 8.1 | Feb 4 | AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks |
| CVE-2026-24780 | AU AutoGPT Significant-Gravitas | 8.8 | Jan 29 | AutoGPT is Vulnerable to RCE via Disabled Block Execution |
| CVE-2025-53944 | AU AutoGPT Significant-Gravitas | 7.7 | Jul 30 | AutoGPT Platform Exposes Graph Execution Results via Authorization Gap |
| CVE-2025-31494 | AU AutoGPT Significant-Gravitas | 3.5 | Apr 14 | AutoGPT allows cross-user sharing of node execution results through WebSockets API |
| CVE-2025-31491 | AU AutoGPT Significant-Gravitas | 8.6 | Apr 14 | AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect |
| CVE-2025-31490 | AU AutoGPT Significant-Gravitas | 7.5 | Apr 14 | AutoGPT allows SSRF due to DNS Rebinding in requests wrapper |
| CVE-2024-10457 | SI significant-gravitas/autogpt significant-gravitas | 6.5 | Mar 20 | SSRF Vulnerabilities in significant-gravitas/autogpt |
| CVE-2025-0454 | SI significant-gravitas/autogpt significant-gravitas | 7.5 | Mar 20 | SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt |
| CVE-2025-1040 | SI significant-gravitas/autogpt significant-gravitas | 8.8 | Mar 20 | Server-Side Template Injection (SSTI) in significant-gravitas/autogpt |
| CVE-2024-8156 | SI significant-gravitas/autogpt significant-gravitas | 9.8 | Mar 20 | Command Injection in significant-gravitas/autogpt |
| CVE-2025-22603 | AU AutoGPT Significant-Gravitas | 8.1 | Mar 10 | AutoGPT SSRF vulnerability |