agentprime: significant-gravitas-autogpt

agentprime: significant-gravitas-autogptEvery new CVE for significant-gravitas-autogpt.https://agentprime.io/CVE-2026-72922: AutoGPT: Webhook provider path confusion bypasses generic webhook secret verificationhttps://agentprime.io/advisories/CVE-2026-72922/https://agentprime.io/advisories/CVE-2026-72922/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 14:32:11 GMTCVECVE-2025-32394: AutoGPT: There is a DoS vulnerability in AITextSummarizerBlockhttps://agentprime.io/advisories/CVE-2025-32394/https://agentprime.io/advisories/CVE-2025-32394/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 16:11:20 GMTCVECVE-2025-32423: AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlockhttps://agentprime.io/advisories/CVE-2025-32423/https://agentprime.io/advisories/CVE-2025-32423/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 16:09:06 GMTCVECVE-2026-56663: AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` accesshttps://agentprime.io/advisories/CVE-2026-56663/https://agentprime.io/advisories/CVE-2026-56663/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 16:04:54 GMTCVECVE-2026-56823: AutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping Triggeringhttps://agentprime.io/advisories/CVE-2026-56823/https://agentprime.io/advisories/CVE-2026-56823/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 16:02:59 GMTCVECVE-2026-33235: AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating featureshttps://agentprime.io/advisories/CVE-2026-33235/https://agentprime.io/advisories/CVE-2026-33235/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 20:52:00 GMTCVECVE-2026-55237: AutoGPT SignUp Page has DOM-Based XSS and Open Redirecthttps://agentprime.io/advisories/CVE-2026-55237/https://agentprime.io/advisories/CVE-2026-55237/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:21:40 GMTCVECVE-2025-32437: AutoGPT has a DoS vulnerability in MediaDurationBlockhttps://agentprime.io/advisories/CVE-2025-32437/https://agentprime.io/advisories/CVE-2025-32437/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:20:24 GMTCVECVE-2025-32436: AutoGPT has a DoS vulnerability in AddAudioToVideoBlockhttps://agentprime.io/advisories/CVE-2025-32436/https://agentprime.io/advisories/CVE-2025-32436/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:18:52 GMTCVECVE-2025-32424: AutoGPT has a DoS vulnerability in ScreenshotWebPageBlockhttps://agentprime.io/advisories/CVE-2025-32424/https://agentprime.io/advisories/CVE-2025-32424/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:14:52 GMTCVECVE-2025-32422: AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlockhttps://agentprime.io/advisories/CVE-2025-32422/https://agentprime.io/advisories/CVE-2025-32422/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:12:50 GMTCVECVE-2025-32392: AutoGPT has a DoS vulnerability in LoopVideoBlockhttps://agentprime.io/advisories/CVE-2025-32392/https://agentprime.io/advisories/CVE-2025-32392/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 16:08:18 GMTCVECVE-2026-45023: AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/executehttps://agentprime.io/advisories/CVE-2026-45023/https://agentprime.io/advisories/CVE-2026-45023/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:30:55 GMTCVECVE-2026-33234: AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP serverhttps://agentprime.io/advisories/CVE-2026-33234/https://agentprime.io/advisories/CVE-2026-33234/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 00:51:41 GMTCVECVE-2026-33233: AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entrieshttps://agentprime.io/advisories/CVE-2026-33233/https://agentprime.io/advisories/CVE-2026-33233/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 00:46:49 GMTCVECVE-2026-33232: AutoGPT: Unauthenticated DoS via Disk Space Exhaustionhttps://agentprime.io/advisories/CVE-2026-33232/https://agentprime.io/advisories/CVE-2026-33232/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 00:35:50 GMTCVECVE-2026-30950: AutoGPT has Authenticated Session Hijacking via IDORhttps://agentprime.io/advisories/CVE-2026-30950/https://agentprime.io/advisories/CVE-2026-30950/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 22:28:10 GMTCVECVE-2025-32425: AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoShttps://agentprime.io/advisories/CVE-2025-32425/https://agentprime.io/advisories/CVE-2025-32425/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 15:55:03 GMTCVECVE-2026-26020: AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)https://agentprime.io/advisories/CVE-2026-26020/https://agentprime.io/advisories/CVE-2026-26020/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 20:52:15 GMTCVEcriticalCVE-2026-26006: Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2026-26006/https://agentprime.io/advisories/CVE-2026-26006/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 21:21:00 GMTCVECVE-2025-32393: AutoGPT has a DoS vulnerability in ReadRSSFeedBlockhttps://agentprime.io/advisories/CVE-2025-32393/https://agentprime.io/advisories/CVE-2025-32393/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Feb 2026 22:57:54 GMTCVECVE-2025-62616: AutoGPT has SSRF vulnerability in SendDiscordFileBlockhttps://agentprime.io/advisories/CVE-2025-62616/https://agentprime.io/advisories/CVE-2025-62616/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 22:28:40 GMTCVEcriticalCVE-2025-62615: AutoGPT has SSRF vulnerability in ReadRSSFeedBlockhttps://agentprime.io/advisories/CVE-2025-62615/https://agentprime.io/advisories/CVE-2025-62615/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 22:28:37 GMTCVEcriticalCVE-2026-22038: AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blockshttps://agentprime.io/advisories/CVE-2026-22038/https://agentprime.io/advisories/CVE-2026-22038/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 22:28:20 GMTCVECVE-2025-53944: AutoGPT Platform Exposes Graph Execution Results via Authorization Gaphttps://agentprime.io/advisories/CVE-2025-53944/https://agentprime.io/advisories/CVE-2025-53944/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:28:36 GMTCVECVE-2025-31494: AutoGPT allows cross-user sharing of node execution results through WebSockets APIhttps://agentprime.io/advisories/CVE-2025-31494/https://agentprime.io/advisories/CVE-2025-31494/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 23:21:10 GMTCVECVE-2025-31491: AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirecthttps://agentprime.io/advisories/CVE-2025-31491/https://agentprime.io/advisories/CVE-2025-31491/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 23:15:56 GMTCVECVE-2025-31490: AutoGPT allows SSRF due to DNS Rebinding in requests wrapperhttps://agentprime.io/advisories/CVE-2025-31490/https://agentprime.io/advisories/CVE-2025-31490/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 23:07:25 GMTCVECVE-2024-10457: SSRF Vulnerabilities in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2024-10457/https://agentprime.io/advisories/CVE-2024-10457/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:37 GMTCVECVE-2025-0454: SSRF Check Bypass in Requests Utility in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2025-0454/https://agentprime.io/advisories/CVE-2025-0454/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:30 GMTCVECVE-2025-1040: Server-Side Template Injection (SSTI) in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2025-1040/https://agentprime.io/advisories/CVE-2025-1040/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:05 GMTCVECVE-2024-8156: Command Injection in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2024-8156/https://agentprime.io/advisories/CVE-2024-8156/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:12 GMTCVECVE-2025-22603: AutoGPT SSRF vulnerabilityhttps://agentprime.io/advisories/CVE-2025-22603/https://agentprime.io/advisories/CVE-2025-22603/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Mar 2025 18:09:51 GMTCVECVE-2024-1880: OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2024-1880/https://agentprime.io/advisories/CVE-2024-1880/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:39:43 GMTCVECVE-2024-1881: Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2024-1881/https://agentprime.io/advisories/CVE-2024-1881/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:19:08 GMTCVECVE-2024-1879: CSRF to RCE in significant-gravitas/autogpthttps://agentprime.io/advisories/CVE-2024-1879/https://agentprime.io/advisories/CVE-2024-1879/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 17:53:21 GMTCVE