PT-2026-41762 · Autogpt+1 · Autogpt+1

Published 2026-05-19 · Updated 2026-05-19 · CVE-2026-33233

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AutoGPT versions 0.6.34 through 0.6.51

Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The backend deserializes Redis cache bytes using the pickle.loads() function without integrity or authenticity checks. While the write path uses pickle.dumps() to serialize values into Redis, the read path invokes pickle.loads() on bytes without HMAC signatures or strict schema validation. An attacker capable of poisoning a shared-cache key in Redis can achieve arbitrary command execution within the backend container context, impacting confidentiality, integrity, and availability.

Recommendations Update to version 0.6.52.

Exploit

Fix

RCE

Insufficient Verification of Data Authenticity

Deserialization of Untrusted Data

Code Injection

Weakness Enumeration

CWE-345

CWE-502

CWE-94

Related Identifiers

CVE-2026-33233

GHSA-RFG2-37XQ-W4M9

Affected Products

Autogpt

Redis

References · 8

• 🔥 https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-rfg2-37xq-w4m9 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33233.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-33233 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33233 · Vendor Advisory
• https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.52 · Note
• https://twitter.com/CVEnew/status/2056670110459580641 · Twitter Post
• https://t.me/CVEtracker/54185 · Telegram Post
• https://t.me/cveNotify/163958 · Telegram Post