PT-2026-5312 · Significant Gravitas · Autogpt

Rahulgovind · Published 2026-01-29 · Updated 2026-02-27 · CVE-2026-24780

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.44

Description AutoGPT Platform’s block execution endpoints, both the main web API and external API, allow execution of blocks by UUID without verifying the disabled flag. This allows any authenticated user to execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and executes it using import (), resulting in Remote Code Execution (RCE). In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register. If signup is disabled (e.g., hosted deployments), the attacker requires an existing account. The vulnerable BlockInstallationBlock uses a hardcoded UUID. The dangerous block writes attacker-provided code to the server filesystem and executes it via import (). The main web API endpoint is located at /blocks/{block id}/execute and requires a logged-in user. The external API endpoint is located at /external-api/v1/blocks/{block id}/execute and requires an API key with EXECUTE BLOCK permission, which can be created by any user via the main API.

Recommendations Update to AutoGPT version 0.6.44 or later.

Exploit

Fix

RCE

Code Injection

Incorrect Default Permissions

Incorrect Authorization

Weakness Enumeration

CWE-94

CWE-276

CWE-863

Related Identifiers

CVE-2026-24780

GHSA-R277-3XC5-C79V

Affected Products

Autogpt

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24780.json · Exploit
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-r277-3xc5-c79v · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r277-3xc5-c79v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24780 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24780 · Security Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L1408-L1424 · Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93 · Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/block.py#L15-L78 · Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/data/block.py#L459 · Note
• https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395 · Note
• https://github.com/Significant-Gravitas/AutoGPT · Note
• https://twitter.com/TomarPrateek23/status/2025933755031175591 · Twitter Post
• https://twitter.com/CVEnew/status/2016934790776148193 · Twitter Post
• https://twitter.com/TomarPrateek23/status/2026296162140193111 · Twitter Post
• https://twitter.com/TomarPrateek23/status/2027383331839750333 · Twitter Post