agpt records

23 published records for vendor agpt.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 43.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

23 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2024-8156No exploit	Command Injection in significant-gravitas/autogptagpt · autogpt classic · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.7%	Mar 20, 2025
39Monitor	CVE-2024-1881No exploit	Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogptagpt · autogpt classic · CWE-78 pre-auth RCE Command injection	Critical9.8	—	1.4%	Jun 6, 2024
39Monitor	CVE-2024-6091No exploit	Shell Command Denylist Bypass in significant-gravitas/autogptagpt · autogpt classic · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	Sep 11, 2024
37Monitor	CVE-2026-26020No exploit	AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)agpt · autogpt platform · CWE-285 RCE Broken access control (IDOR)	Critical9.4	—	0.9%	Feb 12, 2026
37Monitor	CVE-2025-62615No exploit	AutoGPT has SSRF vulnerability in ReadRSSFeedBlockagpt · autogpt platform · CWE-918 Pre-auth SSRF	Critical9.3	—	0.4%	Feb 4, 2026
37Monitor	CVE-2025-62616No exploit	AutoGPT has SSRF vulnerability in SendDiscordFileBlockagpt · autogpt platform · CWE-918 Pre-auth SSRF	Critical9.3	—	0.3%	Feb 4, 2026
36Monitor	CVE-2025-1040No exploit	Server-Side Template Injection (SSTI) in significant-gravitas/autogptagpt · autogpt platform · CWE-1336 RCE SSTI	High8.8	—	1.7%	Mar 20, 2025
35Monitor	CVE-2024-1879No exploit	CSRF to RCE in significant-gravitas/autogptagpt · autogpt classic · CWE-352 pre-auth RCE CSRF	High8.8	—	0.5%	Jun 6, 2024
35Monitor	CVE-2023-37273Proof of concept	Docker escape in Auto-GPT when running from docker-compose.yml included in git repoagpt · autogpt classic · CWE-94 RCE	High8.8	—	0.3%	Jul 13, 2023
34Monitor	CVE-2026-24780No exploit	AutoGPT is Vulnerable to RCE via Disabled Block Executionagpt · autogpt platform · CWE-94 RCE	High8.6	—	1.2%	Jan 29, 2026
34Monitor	CVE-2025-31491No exploit	AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirectagpt · autogpt platform · CWE-200 Pre-auth Info leak	High8.6	—	0.4%	Apr 14, 2025
34Monitor	CVE-2025-32393No exploit	AutoGPT has a DoS vulnerability in ReadRSSFeedBlockagpt · autogpt platform · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Feb 5, 2026
32Monitor	CVE-2026-22038Proof of concept	AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocksagpt · autogpt platform · CWE-532 Info leak	High8.1	—	0.4%	Feb 4, 2026
31Monitor	CVE-2024-1880No exploit	OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogptagpt · autogpt classic · CWE-78 RCE Command injection	High7.8	—	1.0%	Jun 6, 2024
31Monitor	CVE-2023-37274No exploit	Python code execution sandbox escape in non-docker version in Auto-GPTagpt · autogpt classic · CWE-94 RCE Path traversal	High7.8	—	0.3%	Jul 13, 2023
30Monitor	CVE-2025-0454No exploit	SSRF Check Bypass in Requests Utility in significant-gravitas/autogptagpt · autogpt platform · CWE-918 Pre-auth SSRF	High7.5	—	0.5%	Mar 20, 2025
30Monitor	CVE-2025-22603No exploit	AutoGPT SSRF vulnerabilityagpt · autogpt platform · CWE-918 Pre-auth SSRF	High7.7	—	0.5%	Mar 10, 2025
30Monitor	CVE-2025-31490No exploit	AutoGPT allows SSRF due to DNS Rebinding in requests wrapperagpt · autogpt platform · CWE-918 Pre-auth SSRF	High7.5	—	0.5%	Apr 14, 2025
30Monitor	CVE-2025-53944No exploit	AutoGPT Platform Exposes Graph Execution Results via Authorization Gapagpt · autogpt platform · CWE-285 Broken access control (IDOR)	High7.7	—	0.4%	Jul 30, 2025
26Monitor	CVE-2026-26006No exploit	Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptagpt · autogpt platform · CWE-1333 Denial of service	Medium6.5	—	0.6%	Feb 10, 2026
20Monitor	CVE-2025-32425No exploit	AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoSagpt · autogpt platform · CWE-770 Denial of service	Medium5.1	—	0.1%	May 13, 2026
17Monitor	CVE-2023-37275No exploit	System logs spoofable in Auto-GPT via ANSI control sequencesagpt · autogpt classic · CWE-117 Pre-auth	Medium4.3	—	0.4%	Jul 13, 2023
14Monitor	CVE-2025-31494No exploit	AutoGPT allows cross-user sharing of node execution results through WebSockets APIagpt · autogpt platform · CWE-200 Info leak	Low3.5	—	0.3%	Apr 14, 2025

CVE-2024-8156
40Plan
Command Injection in significant-gravitas/autogpt
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
agpt · autogpt classicMar 20, 2025
CVE-2024-1881
39Monitor
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
agpt · autogpt classicJun 6, 2024
CVE-2024-6091
39Monitor
Shell Command Denylist Bypass in significant-gravitas/autogpt
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
agpt · autogpt classicSep 11, 2024
CVE-2026-26020
37Monitor
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
agpt · autogpt platformFeb 12, 2026
CVE-2025-62615
37Monitor
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSRF
agpt · autogpt platformFeb 4, 2026
CVE-2025-62616
37Monitor
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSRF
agpt · autogpt platformFeb 4, 2026
CVE-2025-1040
36Monitor
Server-Side Template Injection (SSTI) in significant-gravitas/autogpt
HighCVSS 8.8No exploitEPSS 1%
- RCE
- SSTI
agpt · autogpt platformMar 20, 2025
CVE-2024-1879
35Monitor
CSRF to RCE in significant-gravitas/autogpt
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- CSRF
agpt · autogpt classicJun 6, 2024
CVE-2023-37273
35Monitor
Docker escape in Auto-GPT when running from docker-compose.yml included in git repo
HighCVSS 8.8Proof of conceptEPSS 0%
- RCE
agpt · autogpt classicJul 13, 2023
CVE-2026-24780
34Monitor
AutoGPT is Vulnerable to RCE via Disabled Block Execution
HighCVSS 8.6No exploitEPSS 1%
- RCE
agpt · autogpt platformJan 29, 2026
CVE-2025-31491
34Monitor
AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Info leak
agpt · autogpt platformApr 14, 2025
CVE-2025-32393
34Monitor
AutoGPT has a DoS vulnerability in ReadRSSFeedBlock
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
agpt · autogpt platformFeb 5, 2026
CVE-2026-22038
32Monitor
AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks
HighCVSS 8.1Proof of conceptEPSS 0%
- Info leak
agpt · autogpt platformFeb 4, 2026
CVE-2024-1880
31Monitor
OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Command injection
agpt · autogpt classicJun 6, 2024
CVE-2023-37274
31Monitor
Python code execution sandbox escape in non-docker version in Auto-GPT
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Path traversal
agpt · autogpt classicJul 13, 2023
CVE-2025-0454
30Monitor
SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
agpt · autogpt platformMar 20, 2025
CVE-2025-22603
30Monitor
AutoGPT SSRF vulnerability
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- SSRF
agpt · autogpt platformMar 10, 2025
CVE-2025-31490
30Monitor
AutoGPT allows SSRF due to DNS Rebinding in requests wrapper
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
agpt · autogpt platformApr 14, 2025
CVE-2025-53944
30Monitor
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
agpt · autogpt platformJul 30, 2025
CVE-2026-26006
26Monitor
Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
agpt · autogpt platformFeb 10, 2026
CVE-2025-32425
20Monitor
AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS
MediumCVSS 5.1No exploitEPSS 0%
- Denial of service
agpt · autogpt platformMay 13, 2026
CVE-2023-37275
17Monitor
System logs spoofable in Auto-GPT via ANSI control sequences
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
agpt · autogpt classicJul 13, 2023
CVE-2025-31494
14Monitor
AutoGPT allows cross-user sharing of node execution results through WebSockets API
LowCVSS 3.5No exploitEPSS 0%
- Info leak
agpt · autogpt platformApr 14, 2025