repository icon
significant-gravitas / autogpt Project repository

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

Submit a report

FIRST INTERACTION

WITHIN7 DAYS

REVIEW

WITHIN25 DAYS

FIX

WITHIN88 DAYS

Redos (Regular Expression Denial of Service) at Code Extraction Block
ltduc147
pending
Arbitrary Local File Execution via --llamafile and --llamafile_url
rifqihz
pending
Leakage of cross-domain cookies in requests redirect
megamansec
pending
SSRF due to DNS Rebind bypassing anti-SSRF Requests wrapper
megamansec
pending
SSRF check bypass in Requests utility
b0-n0-b0
High
•CVE-2025-0454
Prompt to Remote Code Execution due to jinja2 SSTI by FillTextTemplateBlock and...
yuligesec
duplicate
Critical
AutoGPT SSTI Vulnerability Leading to Remote Code Execution (RCE)
superboy-zjc
High
•CVE-2025-1040
SSRF Vulnerabilities found in Search and Github Integration AutoGPT Blocks
jackfromeast
Medium
•$255•CVE-2024-10457
Secrets exfiltration via the workflow-checker.yml workflow
h2oa
High
•$450•CVE-2024-8156
Shell command denylist bypass
pinkdraconian
Critical
•$900•CVE-2024-6091
Bypass for `EXECUTE_LOCAL_COMMANDS=False`
pinkdraconian
informative
Critical
•CVE-2024-4848
Shell command denylist bypass
pinkdraconian
informative
Critical
Shell command allowlist / denylist bypass
ehtec
High
•$450•CVE-2024-1881
CSRF to RCE
ehtec
High
•$450•CVE-2024-1879
OS Command injection in MacOS Text-To-Speech class
ehtec
High
•$450•CVE-2024-1880