Product by Significant-Gravitas
Significant-Gravitas AutoGPT
30 known vulnerabilities in Significant-Gravitas AutoGPT (Significant-Gravitas), 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-24780 | AutoGPT is Vulnerable to RCE via Disabled Block Execution | 8.8 | |
| Critical | CVE-2026-26020 | AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__) | 8.8 | |
| High | CVE-2026-72922 | AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification | 8.2 | |
| Critical | CVE-2025-62615 | AutoGPT has SSRF vulnerability in ReadRSSFeedBlock | 9.8 | |
| High | CVE-2025-32392 | AutoGPT has a DoS vulnerability in LoopVideoBlock | — | |
| Critical | CVE-2025-62616 | AutoGPT has SSRF vulnerability in SendDiscordFileBlock | 9.8 | |
| High | CVE-2025-32393 | AutoGPT has a DoS vulnerability in ReadRSSFeedBlock | 6.5 | |
| High | CVE-2025-32424 | AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock | — | |
| High | CVE-2026-22038 | AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks | 8.1 | |
| High | CVE-2025-32437 | AutoGPT has a DoS vulnerability in MediaDurationBlock | — | |
| High | CVE-2025-32422 | AutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock | — | |
| High | CVE-2025-22603 | AutoGPT SSRF vulnerability | 8.1 | |
| High | CVE-2025-31491 | AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect | 8.6 | |
| High | CVE-2026-33235 | AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features | 7.7 | |
| High | CVE-2026-56663 | Significant-Gravitas AutoGPT: Server-Side Request Forgery (SSRF) | 8.5 | |
| High | CVE-2025-53944 | AutoGPT Platform Exposes Graph Execution Results via Authorization Gap | 7.7 | |
| High | CVE-2026-55237 | AutoGPT SignUp Page has DOM-Based XSS and Open Redirect | 8.8 | |
| High | CVE-2026-33232 | AutoGPT: Unauthenticated DoS via Disk Space Exhaustion | 7.5 | |
| Medium | CVE-2026-26006 | Significant-Gravitas AutoGPT: Inefficient Regular Expression Complexity | 6.5 | |
| High | CVE-2025-31490 | AutoGPT allows SSRF due to DNS Rebinding in requests wrapper | 7.5 | |
| High | CVE-2026-30950 | AutoGPT has Authenticated Session Hijacking via IDOR | 7.1 | |
| High | CVE-2025-32436 | AutoGPT has a DoS vulnerability in AddAudioToVideoBlock | — | |
| High | CVE-2026-33233 | AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries | 7.6 | |
| Medium | CVE-2025-32394 | AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock | — | |
| Medium | CVE-2025-32423 | AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock | — |