CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand 블록이 로그에 API 키를 평문으로 기록 CVE ID: CVE-2026-22038 제품: AutoGPT 플랫폼 Stagehand 통합 영향을 받는 버전: autogpt-platform-beta-v0.6.45까지의 모든 버전 패치된 버전: autogpt-platform-beta-v0.6.46 취약점 유형: CWE-532 — 로그 파일에 민감한 정보 삽입 심각도: 높음 보고자: Panuganti Siva Aditya @sivaadityacoder 보고 날짜: 2025년...

autogpt-CVE-2026-30950-poc

AutoGPT CVE-2026-30950 POC CVE-2026-30950에 대한 개념 증명PoC 데모입니다. AutoGPT Platform에서 인증된 IDOR권한 누락 취약점으로, 로그인한 사용자가 세션에 대한 사전 접근 권한 없이 단일 PATCH 요청을 통해 다른 사용자의 채팅 세션을 재할당하여 가로챌 수 있습니다. GHSA: GHSA-q58p-v9r9-7gqj CVE: CVE-2026-30950 CVSS 3.1: 7.1 / High AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L 대상:...

CVE-2026-33234

AutoGPT의 이메일 기능을 내부 네트워크 스캐너로 전환한 방법 CVE-2026-33234 | 중간 5.0 | GHSA-4jwj-6mg5-wrwf 작성자: Pavan Nallamothu AutoGPT Platform에서 네트워크에 닿는 모든 사용자 제어 입력을 매핑하고 있었습니다. HTTP 계층은 철저히 잠겨 있었습니다. 사설 IP 대역10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 루프백, 클라우드 메타데이터 엔드포인트 — 모두 차단 목록에 있었습니다. 여러 각도에서 HTTP 게이트를 확인했습니...

CVE-2026-72922

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922 AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922 AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

EUVD-2026-56177

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922 AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922

Summary: CVE-2026-72922 affects AutoGPT prior to version 0.6.70. The root cause is in autogpt_platform/backend/backend/api/features/integrations/router.py, where the webhook_ingress_generic route selects the webhook manager using the untrusted provider URL segment without verifying webhook.provid...

CVE-2026-72922: Improper Authentication

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

PT-2026-70222

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.70 Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. A path confusion issue exists in the webhook ingress generic route within...

PYSEC-2026-1078 AutoGPT is Vulnerable to RCE via Disabled Block Execution

Summary AutoGPT Platform's block execution endpoints both main web API and external API allow executing blocks by UUID without checking the disabled flag. Any authenticated user can execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and execut...

AutoGPT is Vulnerable to RCE via Disabled Block Execution

SummaryAutoGPT Platform's block execution endpoints both main web API and external API allow executing blocks by UUID without checking the disabled flag. Any authenticated user can execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and execute...

AutoGPT bypass of the shell commands denylist settings

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing...

PYSEC-2026-257 AutoGPT bypass of the shell commands denylist settings

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing...

PT-2026-53354

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing...

CVE-2026-56663

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. isipblocked in...

CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content,...

CVE-2025-32394 AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the...

CVE-2025-32394 AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the...