# Significant-Gravitas AutoGPT.

Every CVE that names Significant-Gravitas AutoGPT among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification](https://agentprime.io/advisories/CVE-2026-72922.md)
  `CVE-2026-72922` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock](https://agentprime.io/advisories/CVE-2025-32394.md)
  `CVE-2025-32394` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service, CWE-405
- [AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock](https://agentprime.io/advisories/CVE-2025-32423.md)
  `CVE-2025-32423` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service
- [AutoGPT: SSRF-to-RCE Chain in \`SendWebRequestBlock\` via IP validation bypass and internal \`pg-meta\` access](https://agentprime.io/advisories/CVE-2026-56663.md)
  `CVE-2026-56663` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggering](https://agentprime.io/advisories/CVE-2026-56823.md)
  `CVE-2026-56823` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.4 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control
- [AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features](https://agentprime.io/advisories/CVE-2026-33235.md)
  `CVE-2026-33235` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.7 High · Not analysed yet · Published 24 Jun 2026 · Tags: Denial of service
- [AutoGPT SignUp Page has DOM-Based XSS and Open Redirect](https://agentprime.io/advisories/CVE-2026-55237.md)
  `CVE-2026-55237` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Cross-site scripting (XSS), Open redirect
- [AutoGPT has a DoS vulnerability in MediaDurationBlock](https://agentprime.io/advisories/CVE-2025-32437.md)
  `CVE-2025-32437` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.7 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service
- [AutoGPT has a DoS vulnerability in AddAudioToVideoBlock](https://agentprime.io/advisories/CVE-2025-32436.md)
  `CVE-2025-32436` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service
- [AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock](https://agentprime.io/advisories/CVE-2025-32424.md)
  `CVE-2025-32424` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.7 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service
- [AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock](https://agentprime.io/advisories/CVE-2025-32422.md)
  `CVE-2025-32422` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.7 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service
- [AutoGPT has a DoS vulnerability in LoopVideoBlock](https://agentprime.io/advisories/CVE-2025-32392.md)
  `CVE-2025-32392` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.7 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service
- [AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute](https://agentprime.io/advisories/CVE-2026-45023.md)
  `CVE-2026-45023` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.4 Medium · Not analysed yet · Published 28 May 2026 · Tags: Denial of service, CWE-841
- [AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server](https://agentprime.io/advisories/CVE-2026-33234.md)
  `CVE-2026-33234` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.0 Medium · Not analysed yet · Published 19 May 2026 · Tags: Server-side request forgery (SSRF)
- [AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries](https://agentprime.io/advisories/CVE-2026-33233.md)
  `CVE-2026-33233` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.6 High · Not analysed yet · Published 19 May 2026 · Tags: Code injection, Insecure deserialization, CWE-345
- [AutoGPT: Unauthenticated DoS via Disk Space Exhaustion](https://agentprime.io/advisories/CVE-2026-33232.md)
  `CVE-2026-33232` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.5 High · Not analysed yet · Published 19 May 2026 · Tags: Denial of service, CWE-459
- [AutoGPT has Authenticated Session Hijacking via IDOR](https://agentprime.io/advisories/CVE-2026-30950.md)
  `CVE-2026-30950` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.1 High · Not analysed yet · Published 18 May 2026 · Tags: Broken access control
- [AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS](https://agentprime.io/advisories/CVE-2025-32425.md)
  `CVE-2025-32425` · CVE record: Significant-Gravitas AutoGPT · CVSS 5.1 Medium · Not analysed yet · Published 13 May 2026 · Tags: Denial of service
- [AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (\_\_import\_\_)](https://agentprime.io/advisories/CVE-2026-26020.md)
  `CVE-2026-26020` · CVE record: Significant-Gravitas AutoGPT · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Broken access control
- [Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2026-26006.md)
  `CVE-2026-26006` · CVE record: Significant-Gravitas AutoGPT · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Denial of service
- [AutoGPT has a DoS vulnerability in ReadRSSFeedBlock](https://agentprime.io/advisories/CVE-2025-32393.md)
  `CVE-2025-32393` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2026 · Tags: Denial of service
- [AutoGPT has SSRF vulnerability in SendDiscordFileBlock](https://agentprime.io/advisories/CVE-2025-62616.md)
  `CVE-2025-62616` · CVE record: Significant-Gravitas AutoGPT · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [AutoGPT has SSRF vulnerability in ReadRSSFeedBlock](https://agentprime.io/advisories/CVE-2025-62615.md)
  `CVE-2025-62615` · CVE record: Significant-Gravitas AutoGPT · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks](https://agentprime.io/advisories/CVE-2026-22038.md)
  `CVE-2026-22038` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.1 High · Not analysed yet · Published 4 Feb 2026 · Tags: Information disclosure
- [AutoGPT Platform Exposes Graph Execution Results via Authorization Gap](https://agentprime.io/advisories/CVE-2025-53944.md)
  `CVE-2025-53944` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.7 High · Not analysed yet · Published 30 Jul 2025 · Tags: Broken access control
- [AutoGPT allows cross-user sharing of node execution results through WebSockets API](https://agentprime.io/advisories/CVE-2025-31494.md)
  `CVE-2025-31494` · CVE record: Significant-Gravitas AutoGPT · CVSS 3.5 Low · Not analysed yet · Published 14 Apr 2025 · Tags: Information disclosure, Broken access control
- [AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect](https://agentprime.io/advisories/CVE-2025-31491.md)
  `CVE-2025-31491` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.6 High · Not analysed yet · Published 14 Apr 2025 · Tags: Information disclosure
- [AutoGPT allows SSRF due to DNS Rebinding in requests wrapper](https://agentprime.io/advisories/CVE-2025-31490.md)
  `CVE-2025-31490` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Server-side request forgery (SSRF)
- [SSRF Vulnerabilities in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2024-10457.md)
  `CVE-2024-10457` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Server-side request forgery (SSRF)
- [SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2025-0454.md)
  `CVE-2025-0454` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Server-side request forgery (SSRF)
- [Server-Side Template Injection (SSTI) in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2025-1040.md)
  `CVE-2025-1040` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Code injection
- [Command Injection in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2024-8156.md)
  `CVE-2024-8156` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Command injection
- [AutoGPT SSRF vulnerability](https://agentprime.io/advisories/CVE-2025-22603.md)
  `CVE-2025-22603` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.7 High · Not analysed yet · Published 10 Mar 2025 · Tags: Server-side request forgery (SSRF)
- [OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2024-1880.md)
  `CVE-2024-1880` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2024 · Tags: Command injection
- [Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2024-1881.md)
  `CVE-2024-1881` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 8.8 High · Not analysed yet · Published 6 Jun 2024 · Tags: Command injection
- [CSRF to RCE in significant-gravitas/autogpt](https://agentprime.io/advisories/CVE-2024-1879.md)
  `CVE-2024-1879` · CVE record: significant-gravitas significant-gravitas/autogpt · CVSS 8.8 High · Not analysed yet · Published 6 Jun 2024 · Tags: Cross-site request forgery (CSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=significant-gravitas-autogpt>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/significant-gravitas-autogpt/>. Everything for agents: <https://agentprime.io/llms.txt>.