Skip to content
OpenAdvisories

Vendor

Significant-Gravitas

41 known vulnerabilities.

Products

AutoGPT 30 significant-gravitas/autogpt 8 Auto-GPT 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-33234 Public exploit

    AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server

    AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.1.0 through 0.6.51, SendEmailBlock in autogpt_platform/backend/backend/blocks/email_block.py accepts a user-supplied smtp_…

    Significant-Gravitas AutoGPT
  • High 7.1
    CVE-2026-30950 Public exploit

    AutoGPT has Authenticated Session Hijacking via IDOR

    AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine th…

    Significant-Gravitas AutoGPT
  • High 8.1
    CVE-2026-22038 Public exploit

    AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

    AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API keys and authe…

    Significant-Gravitas AutoGPT
  • High 8.1
    CVE-2023-37273 Public exploit

    Docker escape in Auto-GPT when running from docker-compose.yml included in git repo

    Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-c…

    Significant-Gravitas Auto-GPT