Agpt vulnerabilities
We track 18 vulnerabilities in Agpt products across 2 products. 18 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2026.
Latest Agpt vulnerabilities
- 8.8 High severity
AutoGPT: Improper Authorization
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.48, an authenticated user could achieve Remote Code Execution (RCE) on the backend server by embedding
- 8.1 High severity
AutoGPT: Insertion of Sensitive Information into Log File
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API keys and authen
- 9.8 Critical severity
AutoGPT: Server-Side Request Forgery
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.34, in SendDiscordFileBlock, the third-party library aiohttp.ClientSession().ge
- 9.8 Critical severity
AutoGPT: Server-Side Request Forgery
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.34, in RSSFeedBlock, the third-party library urllib.request.urlopen is used dir
- 8.8 High severity
AutoGPT: Improper Control of Generation of Code
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and externa
- 7.7 High severity
AutoGPT: Authorization Bypass Through User-Controlled Key
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6.15 and below, the external API's get_graph_execution_results endpoint has an authorization bypass vulnerability. While it correctly validat
- 8.6 High severity
AutoGPT: URL Redirection to Untrusted Site
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows of leakage of cross-domain cookies and protected headers in requests redirect. AutoG
- 7.5 High severity
AutoGPT: Server-Side Request Forgery
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows SSRF due to DNS Rebinding in requests wrapper. AutoGPT is built with a wrapper aroun
- 8.8 High severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements Used in a Template Engine
AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). The vulnerability arises from the improper handling of user-supplied format strings in the `AgentOutputBlock` implement
- 7.5 High severity
significant-gravitas/autogpt: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the `urlparse` function from the `urllib.parse` lib
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input `github.head.ref` is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions
- 8.1 High severity
AutoGPT: Server-Side Request Forgery
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Versions prior to autogpt-platform-beta-v0.4.2 contains a server-side request forgery (SSRF) vulnerability inside c
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can ci
- 9.8 Critical severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function. Specifically, the vulnerability exists
- 7.8 High severity
significant-gravitas/autogpt: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0. The vulnerability arises from the improper neutralization of special elements used in an OS co
- 8.8 High severity
significant-gravitas/autogpt: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. The vulnerability stems from the lack of protections on the API endpoint receiving instructio
- 7.8 High severity
Auto-GPT: Improper Control of Generation of Code
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. When Auto-GPT is executed directly on the host system via the provided run.sh or run.bat files, custom Python code execution is sandboxed using a tempo
- 8.8 High severity
Auto-GPT: Improper Control of Generation of Code
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-co