PT-2025-31393 · Autogpt · Autogpt

Geckosecurity + 2 · Published 2025-07-30 · Updated 2025-08-25 · CVE-2025-53944

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.16

Description AutoGPT is a platform for creating, deploying, and managing continuous artificial intelligence agents. The external API’s get graph execution results endpoint has an authorization bypass. While the API correctly validates user access to the graph id parameter, it fails to verify ownership of the graph exec id parameter. This allows authenticated users to access any execution results by providing arbitrary execution IDs. The internal API implements proper validation for both parameters.

Recommendations Update AutoGPT to version 0.6.16 or later.

Exploit

Fix

Improper Authorization

IDOR

Weakness Enumeration

CWE-285

CWE-639

Related Identifiers

CVE-2025-53944

GHSA-X77J-QG2X-FGG6

Affected Products

Autogpt

References · 11

• 🔥 https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-x77j-qg2x-fgg6 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53944.json · Exploit
• https://github.com/Significant-Gravitas/AutoGPT/commit/309114a727baa2063357810d444e9a119f8dd7f6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53944 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53944 · Vendor Advisory
• https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.16 · Note
• https://t.me/CVEtracker/28752 · Telegram Post
• https://twitter.com/CVEnew/status/1950569221420732662 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1950592123734044797 · Twitter Post
• https://twitter.com/DavidMarquet19/status/1959873524983570757 · Twitter Post
• https://t.me/cveNotify/130922 · Telegram Post