CVE-2025-31494

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The AutoGPT Platform's WebSocket API transmitted node execution updates to subscribers based on the graphid+graphversion. Additionally, there was no che...

CVE-2025-31494

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The AutoGPT Platform's WebSocket API transmitted node execution updates to subscribers based on the graphid+graphversion. Additionally, there was no che...

CVE-2025-31494

creationtimestamp| type| source ---|---|--- 2025-04-14 23:53:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11733 2025-04-15 00:33:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114339165376498544 2025-04-15 02:38:08+00:00| seen|...

autoxx (>=0.0.11, <=0.0.13), vuln-demo-math-ops (1.0.0) potentially affected by CVE-2025-31494 via agpt (0.2.2)

agpt PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on agpt and may be impacted: - autoxx =0.0.11, =0.0.13 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2025-31494 Source advisory: SNYK:PYTHON-AGPT-9802206...

CVE-2025-31494

AutoGPT CVE-2025-31494 affects the WebSocket API where node execution updates are published per graph_id+graph_version. A missing permission check allowed subscribers within the same instance to receive another user�s graph execution updates, exposing potentially sensitive data. The issue does no...