PT-2026-5312 · Significant Gravitas · Autogpt
Rahulgovind
·
Publicado
2026-01-29
·
Atualizado
2026-02-27
·
CVE-2026-24780
CVSS v4.0
9.4
Crítica
| Vetor | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
AutoGPT versions prior to 0.6.44
Description
AutoGPT Platform’s block execution endpoints, both the main web API and external API, allow execution of blocks by UUID without verifying the
disabled flag. This allows any authenticated user to execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and executes it using import (), resulting in Remote Code Execution (RCE). In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register. If signup is disabled (e.g., hosted deployments), the attacker requires an existing account. The vulnerable BlockInstallationBlock uses a hardcoded UUID. The dangerous block writes attacker-provided code to the server filesystem and executes it via import (). The main web API endpoint is located at /blocks/{block id}/execute and requires a logged-in user. The external API endpoint is located at /external-api/v1/blocks/{block id}/execute and requires an API key with EXECUTE BLOCK permission, which can be created by any user via the main API.Recommendations
Update to AutoGPT version 0.6.44 or later.
Exploit
Correção
RCE
Code Injection
Incorrect Default Permissions
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Autogpt