CVE-2025-1040

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to t...

PT-2025-16277 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: AutoGPT versions prior to 0.6.1 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in AutoGPT, which is caused by DNS Rebinding in the requests wrapper. This allows an attacker to bypass the validation of th...

CVE-2024-1879

CVE-2024-1879 affects significant-gravitas/autogpt (v0.5.0). Root cause: unprotected API endpoint that receives instructions, enabling CSRF to bypass protections and allow an attacker to induce a user in the local network to issue crafted requests that can lead to remote command execution. Compou...