PT-2026-40704 · Autogpt · Autogpt

CVE-2025-32425 · Published 2026-05-13 · Updated 2026-05-26

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.32

Description AutoGPT records the execution process to the console, which is captured by Docker as container logs when deployed in container mode. In affected versions, there is no limit on the log size. A high volume of user accesses can lead to excessive log growth on the server disk, resulting in disk resource exhaustion and a Denial of Service (DoS), a condition where the system becomes unavailable to users.

Recommendations Update to version 0.6.32.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-32425

GHSA-VW3V-WHVP-33V5

Affected Products

Autogpt

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32425.json · Exploit
• https://github.com/Significant-Gravitas/AutoGPT/commit/57a06f70883ce6be18738c6ae8bb41085c71e266 · Patch
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-vw3v-whvp-33v5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32425 · Security Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/62361ccc48327b3124549543b45d933d16f622d2/autogpt_platform/docker-compose.platform.yml#L102-L142 · Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/62361ccc48327b3124549543b45d933d16f622d2/autogpt_platform/autogpt_libs/autogpt_libs/logging/config.py#L83-L102 · Note
• https://twitter.com/dailycve/status/2059350868575547699 · Twitter Post