PT-2026-41739 · Autogpt · Autogpt

Published 2026-05-18 · Updated 2026-05-21 · CVE-2026-30950

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions AutoGPT versions 0.6.36 through 0.6.50

Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The software is subject to Authenticated Session Hijacking via Insecure Direct Object Reference (IDOR), a flaw where an application provides direct access to objects based on user-supplied input. An authenticated attacker who determines the session id of another user can take over that session, read all messages, and lock the legitimate user out. This occurs because the 'PATCH /sessions/{session id}/assign-user' endpoint authenticates the caller but fails to verify session ownership. The service layer invokes the session lookup with user id set to None, which the data access layer interprets as a privileged system call, bypassing the ownership filter and allowing any authenticated user to reassign an arbitrary session to themselves.

Recommendations Update to version 0.6.51.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-30950

Affected Products

Autogpt

References · 9

• 🔥 https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-q58p-v9r9-7gqj · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30950 · Security Note
• https://github.com/Significant-Gravitas/AutoGPT/commit/eca7b5e79370c34ed75e80badb824023d7d8629d · Note
• https://twitter.com/LeftenantZero/status/2057549899194077344 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/2057223707416727604 · Twitter Post
• https://t.me/cveNotify/163939 · Telegram Post
• https://twitter.com/CVEnew/status/2056670117396980082 · Twitter Post
• https://twitter.com/infoflowcloud/status/2056671500745298270 · Twitter Post
• https://t.me/CVEtracker/54179 · Telegram Post