CVE-2026-33234

我如何将 AutoGPT 的邮件功能变成内部网络扫描器 CVE-2026-33234 | 中危 5.0 | GHSA-4jwj-6mg5-wrwf 作者： Pavan Nallamothu 我在 AutoGPT Platform 中逐一映射了所有触及网络的用户可控输入。HTTP 层被封锁得严严实实。私有 IP 范围（10.0.0.0/8、172.16.0.0/12、192.168.0.0/16）、回环地址、云元数据端点——全部被列入黑名单。我从多个角度确认了 HTTP 网关的防护。没有任何东西能穿透。 然后我打开了 SendEmailBlock 的配置模式。 SMTP...

CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand 模块以明文形式将 API 密钥记录到日志中 CVE ID： CVE-2026-22038 产品： AutoGPT 平台（Stagehand 集成） 受影响版本： 所有版本，包括 autogpt-platform-beta-v0.6.45 修复版本： autogpt-platform-beta-v0.6.46 漏洞类型： CWE-532 — 将敏感信息插入日志文件 严重性： 高 报告人： Panuganti Siva Aditya @sivaadityacoder 报告日期： 2025 年 12 月 19 日 GitHu...

autogpt-CVE-2026-30950-poc

AutoGPT CVE-2026-30950 POC 针对 CVE-2026-30950 的概念验证演示，该漏洞是 AutoGPT 平台中的一个经过身份验证的 IDOR（缺少授权），允许任何登录用户通过单个 PATCH 请求重新分配（从而劫持）任何其他用户的聊天会话，且无需事先访问该会话。 GHSA: GHSA-q58p-v9r9-7gqj CVE: CVE-2026-30950 CVSS 3.1: 7.1 / 高 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L 受影响：autogpt-platform-backend = 0.6.36 修复版本：0.6.51 由...

CVE-2026-72922

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922 AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

CVE-2026-72922

Summary: CVE-2026-72922 affects AutoGPT prior to version 0.6.70. The root cause is in autogpt_platform/backend/backend/api/features/integrations/router.py, where the webhook_ingress_generic route selects the webhook manager using the untrusted provider URL segment without verifying webhook.provid...

CVE-2026-72922 AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogptplatform/backend/backend/api/features/integrations/router.py webhookingressgeneric route selected getwebhookmanagerprovider from the untrust...

PT-2026-70222

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.70 Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. A path confusion issue exists in the webhook ingress generic route within...

PYSEC-2026-1078 AutoGPT is Vulnerable to RCE via Disabled Block Execution

Summary AutoGPT Platform's block execution endpoints both main web API and external API allow executing blocks by UUID without checking the disabled flag. Any authenticated user can execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and execut...

PYSEC-2026-257 AutoGPT bypass of the shell commands denylist settings

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as whoami and /bin/whoami. An attacker can circumvent this restriction by executing...

CVE-2026-56663

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. isipblocked in...

CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content,...

CVE-2025-32394 AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the...

CVE-2025-32394 AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the...

CVE-2025-32423 AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content,...

CVE-2025-32423 AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content,...

CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content,...

CVE-2025-32423

AutoGPT contains a DoS vulnerability in the ExtractTextInformationBlock prior to version 0.6.32. Malicious input amplification can cause a server to consume excessive memory (e.g., 10 KB input leading to ~50 GB memory usage), exhausting resources and causing DoS. The issue is fixed in 0.6.32. Aff...

CVE-2026-56663

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. isipblocked in...

CVE-2026-56823

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the POST /api/integrations/webhooks/webhookid/ping endpoint fetches the target webhook by primary key alone without verifying that the webhook belongs to the...