agpt kayıtları
agpt üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %43,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-285 Improper Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-770 Allocation of Resources Without Limits or Throttling2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-8156İstismar yok | Command Injection in significant-gravitas/autogptagpt · autogpt classic · CWE-77 | Kritik9,8 | — | %1,7 | 20 Mar 2025 |
39İzleyin | CVE-2024-1881İstismar yok | Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogptagpt · autogpt classic · CWE-78 | Kritik9,8 | — | %1,4 | 6 Haz 2024 |
39İzleyin | CVE-2024-6091İstismar yok | Shell Command Denylist Bypass in significant-gravitas/autogptagpt · autogpt classic · CWE-78 | Kritik9,8 | — | %0,8 | 11 Eyl 2024 |
37İzleyin | CVE-2026-26020İstismar yok | AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)agpt · autogpt platform · CWE-285 | Kritik9,4 | — | %0,9 | 12 Şub 2026 |
37İzleyin | CVE-2025-62615İstismar yok | AutoGPT has SSRF vulnerability in ReadRSSFeedBlockagpt · autogpt platform · CWE-918 | Kritik9,3 | — | %0,4 | 4 Şub 2026 |
37İzleyin | CVE-2025-62616İstismar yok | AutoGPT has SSRF vulnerability in SendDiscordFileBlockagpt · autogpt platform · CWE-918 | Kritik9,3 | — | %0,4 | 4 Şub 2026 |
36İzleyin | CVE-2025-1040İstismar yok | Server-Side Template Injection (SSTI) in significant-gravitas/autogptagpt · autogpt platform · CWE-1336 | Yüksek8,8 | — | %1,7 | 20 Mar 2025 |
35İzleyin | CVE-2024-1879İstismar yok | CSRF to RCE in significant-gravitas/autogptagpt · autogpt classic · CWE-352 | Yüksek8,8 | — | %0,5 | 6 Haz 2024 |
35İzleyin | CVE-2023-37273Kavram kanıtı | Docker escape in Auto-GPT when running from docker-compose.yml included in git repoagpt · autogpt classic · CWE-94 | Yüksek8,8 | — | %0,4 | 13 Tem 2023 |
34İzleyin | CVE-2026-24780İstismar yok | AutoGPT is Vulnerable to RCE via Disabled Block Executionagpt · autogpt platform · CWE-94 | Yüksek8,6 | — | %1,3 | 29 Oca 2026 |
34İzleyin | CVE-2025-31491İstismar yok | AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirectagpt · autogpt platform · CWE-200 | Yüksek8,6 | — | %0,5 | 14 Nis 2025 |
34İzleyin | CVE-2025-32393İstismar yok | AutoGPT has a DoS vulnerability in ReadRSSFeedBlockagpt · autogpt platform · CWE-770 | Yüksek8,7 | — | %0,4 | 5 Şub 2026 |
32İzleyin | CVE-2026-22038Kavram kanıtı | AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocksagpt · autogpt platform · CWE-532 | Yüksek8,1 | — | %0,5 | 4 Şub 2026 |
31İzleyin | CVE-2024-1880İstismar yok | OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogptagpt · autogpt classic · CWE-78 | Yüksek7,8 | — | %1,0 | 6 Haz 2024 |
31İzleyin | CVE-2023-37274İstismar yok | Python code execution sandbox escape in non-docker version in Auto-GPTagpt · autogpt classic · CWE-94 | Yüksek7,8 | — | %0,4 | 13 Tem 2023 |
30İzleyin | CVE-2025-0454İstismar yok | SSRF Check Bypass in Requests Utility in significant-gravitas/autogptagpt · autogpt platform · CWE-918 | Yüksek7,5 | — | %0,6 | 20 Mar 2025 |
30İzleyin | CVE-2025-22603İstismar yok | AutoGPT SSRF vulnerabilityagpt · autogpt platform · CWE-918 | Yüksek7,7 | — | %0,6 | 10 Mar 2025 |
30İzleyin | CVE-2025-31490İstismar yok | AutoGPT allows SSRF due to DNS Rebinding in requests wrapperagpt · autogpt platform · CWE-918 | Yüksek7,5 | — | %0,5 | 14 Nis 2025 |
30İzleyin | CVE-2025-53944İstismar yok | AutoGPT Platform Exposes Graph Execution Results via Authorization Gapagpt · autogpt platform · CWE-285 | Yüksek7,7 | — | %0,5 | 30 Tem 2025 |
26İzleyin | CVE-2026-26006İstismar yok | Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptagpt · autogpt platform · CWE-1333 | Orta6,5 | — | %0,6 | 10 Şub 2026 |
20İzleyin | CVE-2025-32425İstismar yok | AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoSagpt · autogpt platform · CWE-770 | Orta5,1 | — | %0,2 | 13 May 2026 |
17İzleyin | CVE-2023-37275İstismar yok | System logs spoofable in Auto-GPT via ANSI control sequencesagpt · autogpt classic · CWE-117 | Orta4,3 | — | %0,4 | 13 Tem 2023 |
14İzleyin | CVE-2025-31494İstismar yok | AutoGPT allows cross-user sharing of node execution results through WebSockets APIagpt · autogpt platform · CWE-200 | Düşük3,5 | — | %0,4 | 14 Nis 2025 |
- CVE-2024-815640Planlayın
Command Injection in significant-gravitas/autogpt
KritikCVSS 9,8İstismar yokEPSS %2agpt · autogpt classic20 Mar 2025
- CVE-2024-188139İzleyin
Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt
KritikCVSS 9,8İstismar yokEPSS %1agpt · autogpt classic6 Haz 2024
- CVE-2024-609139İzleyin
Shell Command Denylist Bypass in significant-gravitas/autogpt
KritikCVSS 9,8İstismar yokEPSS %1agpt · autogpt classic11 Eyl 2024
- CVE-2026-2602037İzleyin
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
KritikCVSS 9,4İstismar yokEPSS %1agpt · autogpt platform12 Şub 2026
- CVE-2025-6261537İzleyin
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
KritikCVSS 9,3İstismar yokEPSS %0agpt · autogpt platform4 Şub 2026
- CVE-2025-6261637İzleyin
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
KritikCVSS 9,3İstismar yokEPSS %0agpt · autogpt platform4 Şub 2026
- CVE-2025-104036İzleyin
Server-Side Template Injection (SSTI) in significant-gravitas/autogpt
YüksekCVSS 8,8İstismar yokEPSS %2agpt · autogpt platform20 Mar 2025
- CVE-2024-187935İzleyin
CSRF to RCE in significant-gravitas/autogpt
YüksekCVSS 8,8İstismar yokEPSS %1agpt · autogpt classic6 Haz 2024
- CVE-2023-3727335İzleyin
Docker escape in Auto-GPT when running from docker-compose.yml included in git repo
YüksekCVSS 8,8Kavram kanıtıEPSS %0agpt · autogpt classic13 Tem 2023
- CVE-2026-2478034İzleyin
AutoGPT is Vulnerable to RCE via Disabled Block Execution
YüksekCVSS 8,6İstismar yokEPSS %1agpt · autogpt platform29 Oca 2026
- CVE-2025-3149134İzleyin
AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect
YüksekCVSS 8,6İstismar yokEPSS %0agpt · autogpt platform14 Nis 2025
- CVE-2025-3239334İzleyin
AutoGPT has a DoS vulnerability in ReadRSSFeedBlock
YüksekCVSS 8,7İstismar yokEPSS %0agpt · autogpt platform5 Şub 2026
- CVE-2026-2203832İzleyin
AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks
YüksekCVSS 8,1Kavram kanıtıEPSS %0agpt · autogpt platform4 Şub 2026
- CVE-2024-188031İzleyin
OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt
YüksekCVSS 7,8İstismar yokEPSS %1agpt · autogpt classic6 Haz 2024
- CVE-2023-3727431İzleyin
Python code execution sandbox escape in non-docker version in Auto-GPT
YüksekCVSS 7,8İstismar yokEPSS %0agpt · autogpt classic13 Tem 2023
- CVE-2025-045430İzleyin
SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt
YüksekCVSS 7,5İstismar yokEPSS %1agpt · autogpt platform20 Mar 2025
- CVE-2025-2260330İzleyin
AutoGPT SSRF vulnerability
YüksekCVSS 7,7İstismar yokEPSS %1agpt · autogpt platform10 Mar 2025
- CVE-2025-3149030İzleyin
AutoGPT allows SSRF due to DNS Rebinding in requests wrapper
YüksekCVSS 7,5İstismar yokEPSS %0agpt · autogpt platform14 Nis 2025
- CVE-2025-5394430İzleyin
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
YüksekCVSS 7,7İstismar yokEPSS %0agpt · autogpt platform30 Tem 2025
- CVE-2026-2600626İzleyin
Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt
OrtaCVSS 6,5İstismar yokEPSS %1agpt · autogpt platform10 Şub 2026
- CVE-2025-3242520İzleyin
AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS
OrtaCVSS 5,1İstismar yokEPSS %0agpt · autogpt platform13 May 2026
- CVE-2023-3727517İzleyin
System logs spoofable in Auto-GPT via ANSI control sequences
OrtaCVSS 4,3İstismar yokEPSS %0agpt · autogpt classic13 Tem 2023
- CVE-2025-3149414İzleyin
AutoGPT allows cross-user sharing of node execution results through WebSockets API
DüşükCVSS 3,5İstismar yokEPSS %0agpt · autogpt platform14 Nis 2025