PT-2025-12320 · Jinja2+1 · Jinja2+1

Published 2025-03-20 · Updated 2025-08-05 · CVE-2025-1040

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AutoGPT versions 0.3.4 and earlier

Description AutoGPT versions 0.3.4 and earlier are susceptible to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). This issue stems from the inadequate handling of user-supplied format strings within the AgentOutputBlock implementation, where malicious input is passed to the Jinja2 templating engine without sufficient security measures. Attackers can leverage this flaw to execute arbitrary commands on the host system.

Recommendations Update AutoGPT to version 0.4.0 or later.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-1336

CWE-77

Related Identifiers

CVE-2025-1040

Affected Products

Autogpt

Jinja2

References · 9

• 🔥 https://huntr.com/bounties/b74ef75f-61d5-4422-ab15-9550c8b4f185 · Exploit
• https://github.com/significant-gravitas/autogpt/commit/6dba31e0215549604bdcc1aed24e3a1714e75ee2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-1040 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1040 · Vendor Advisory
• https://twitter.com/CVEnew/status/1902671026883813452 · Twitter Post
• https://t.me/cvetracker/19526 · Telegram Post
• https://t.me/cvedetector/20712 · Telegram Post
• https://t.me/cveNotify/130958 · Telegram Post
• https://twitter.com/CveFindCom/status/1902669404300783853 · Twitter Post