CVE-2025-31490

creationtimestamp| type| source ---|---|--- 2025-04-14 23:53:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11735 2025-04-15 00:33:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339165376498544 2025-04-15 02:38:09+00:00| seen|...

CVE-2025-31490

CVE-2025-31490 affects AutoGPT prior to 0.6.1 and is caused by a DNS rebinding flaw in the requests wrapper used to validate hostnames. The wrapper, located at autogpt_platform/backend/backend/util/request.py, attempts to prevent SSRF by rejecting local IPv4/IPv6 resolutions, but a DNS server’s T...