https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:48:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-24780 <p><strong>Affected:</strong> Significant-Gravitas AutoGPT</p> <p>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform&#39;s block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix.</p> <p><strong>Affected:</strong> Significant-Gravitas AutoGPT</p> <p>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform&#39;s block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix.</p> https://cve.radiocsirt.org/vuln/cve-2026-24780 https://cve.radiocsirt.org/vuln/ghsa-r277-3xc5-c79v <p><strong>Affected:</strong> PyPI: agpt</p> <p>### Summary</p> <p>AutoGPT Platform&#39;s block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account.</p> <p>### Details</p> <p>**Two vulnerable endpoints exist:**</p> <p>1. **Main Web API** ([`v1.py#L355-395`](https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395)) - Any authenticated user:</p> <p>```python @v1_router.post( path=&#34;/blocks/{block_id}/execute&#34;, dependencies=[Security(requires_user)], # Just requires login ) async def execute_graph_block(block_id: str, data: BlockInput, ...): obj = get_block(block_id) if not obj: raise HTTPException(status_code=404, ...)</p> <p># NO CHECK FOR obj.disabled!</p> <p>async for name, data in obj.execute(data, ...): output[name].append(data) ```</p> <p>2. **External API** ([`external/v1/routes.py#L79-93`](https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93)) - Same issue.</p> <p>The external API is gated by API key permissions, but any authenticated user can mint AP…</p> <p><strong>Affected:</strong> PyPI: agpt</p> <p>### Summary</p> <p>AutoGPT Platform&#39;s block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account.</p> <p>### Details</p> <p>**Two vulnerable endpoints exist:**</p> <p>1. **Main Web API** ([`v1.py#L355-395`](https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395)) - Any authenticated user:</p> <p>```python @v1_router.post( path=&#34;/blocks/{block_id}/execute&#34;, dependencies=[Security(requires_user)], # Just requires login ) async def execute_graph_block(block_id: str, data: BlockInput, ...): obj = get_block(block_id) if not obj: raise HTTPException(status_code=404, ...)</p> <p># NO CHECK FOR obj.disabled!</p> <p>async for name, data in obj.execute(data, ...): output[name].append(data) ```</p> <p>2. **External API** ([`external/v1/routes.py#L79-93`](https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93)) - Same issue.</p> <p>The external API is gated by API key permissions, but any authenticated user can mint AP…</p> https://cve.radiocsirt.org/vuln/ghsa-r277-3xc5-c79v