What is the CVSS score of CVE-2026-24780?

CVE-2026-24780 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Python are affected by CVE-2026-24780?

CVE-2026-24780 is a high-severity vulnerability affecting AutoGPT deployments with no available patch and active public exploits.

Is there a public PoC exploit available for CVE-2026-24780?

Yes, a public proof-of-concept exploit is available for CVE-2026-24780. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-24780?

Within 24 hours: Inventory all AutoGPT instances in production and development environments; restrict network access to AutoGPT deployments to trusted IP ranges only. Within 7 days: Implement enhanced monitoring and logging for AutoGPT API calls and agent activities; conduct security assessment of exposed instances and connected data sources. Within 30 days: Evaluate migration to alternative AI orchestration platforms or await vendor patch; establish incident response procedures specific to AutoGPT compromise scenarios.

Python CVE-2026-24780

HIGH

Code Injection (CWE-94)

2026-01-29 security-advisories@github.com

GHSA-r277-3xc5-c79v

Python RCE AI / ML Autogpt Platform

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

PoC Detected

Feb 17, 2026 - 16:04 vuln.today

Public exploit code

CVE Published

Jan 29, 2026 - 18:16 nvd

HIGH 8.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 pypi packages depend on agpt (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 0.2.2.

DescriptionGitHub Advisory

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the disabled flag. Any authenticated user can execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and executes it via __import__(), achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix.

AnalysisAI

Remote code execution in AutoGPT Platform prior to v0.6.44 allows authenticated users to execute disabled blocks and write arbitrary Python code to the server filesystem. The vulnerability stems from insufficient validation of the disabled flag in block execution endpoints, enabling attackers to achieve code execution via the BlockInstallationBlock component. Public exploit code exists, and self-hosted instances with Supabase signup enabled are particularly vulnerable to account creation and exploitation.

Technical ContextAI

Classified as CWE-94 (Code Injection). Affects Autogpt Platform. AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the disabled flag. Any authenticated user can execute the disabled BlockInstallationBlock, which writes arbitrary Python code to the server filesystem and executes it via `__import_