PT-2026-20775 · Autogpt · Autogpt

Published 2026-02-19 · Updated 2026-02-19 · CVE-2025-41023

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AutoGPT (affected versions not specified)

Description An authentication bypass allows an attacker to circumvent security checks. Successful exploitation grants unauthorized access to the web application, enabling the attacker to utilize all features irrespective of authorization protocols.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-41023

Affected Products

Autogpt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-41023 · Security Note
• https://twitter.com/CVEnew/status/2024411314844578038 · Twitter Post
• https://t.me/CVEtracker/45100 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso/authentication-bypass-autogpt-de-thesamur · Note