CVE-2025-22603 AutoGPT SSRF vulnerability

🗓️ 10 Mar 2025 18:09:51Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Server-side request forgery vulnerability in AutoGPT versions before 0.4.2 allows IPV6 exploitation.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-22603	10 Mar 202519:38	–	circl
CNNVD	AutoGPT 代码问题漏洞	10 Mar 202500:00	–	cnnvd
CVE	CVE-2025-22603	10 Mar 202518:09	–	cve
Cvelist	CVE-2025-22603 AutoGPT SSRF vulnerability	10 Mar 202518:09	–	cvelist
EUVD	EUVD-2025-7613	3 Oct 202520:07	–	euvd
NVD	CVE-2025-22603	10 Mar 202519:15	–	nvd
Positive Technologies	PT-2025-10613	10 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-22603	12 Mar 202520:10	–	redhatcve
Vulnrichment	CVE-2025-22603 AutoGPT SSRF vulnerability	10 Mar 202518:09	–	vulnrichment

Source	Link
boatneck-faucet-cba	www.boatneck-faucet-cba.notion.site/SSRF-of-AutoGPT-153b650a4d88804d923ad65a015a7d61
github	www.github.com/Significant-Gravitas/AutoGPT/blob/2121ffd06b26a438706bf642372cc46d81c94ddc/autogpt_platform/backend/backend/util/request.py
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22603.json
github	www.github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-4c8v-hwxc-2356
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-22603
github	www.github.com/Significant-Gravitas/AutoGPT/commit/26214e1b2c6777e0fae866642b23420adaadd6c4

02 Apr 2026 12:45Current

6.9Medium risk

Vulners AI Score6.9

CVSS 48.7

EPSS0.00217

cve 2025 22603 autogpt vulnerability server side request forgery ipv6 exploitation software