Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-41023 EUVD-2025-207633GHSA-wmwp-mm98-6v2w

Authentication bypass in AutoGPT de Thesamur

Published Feb 19, 2026 · Updated Feb 23, 2026 · Assigned by INCIBE

Description

An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.

Affected products

VendorProductAffectedFixed
Thesamur AutoGPT All versions —

References