Agentgpt
Monthly
Authorization bypass in AgentGPT through 1.0.0 allows authenticated attackers to hijack other users' agent runs by supplying an arbitrary run_id in the request body, exploiting missing ownership validation in the AgentCRUD.create_task and validate_task_count functions. Successful exploitation enables task history corruption, exhaustion of per-run LLM loop budgets, and financial damage by driving API costs against the victim's account. A public proof-of-concept exists per VulnCheck reporting; no CISA KEV listing is present, and the low CVSS 4.0 score of 2.3 reflects the high attack complexity and constrained integrity/availability impact.
Authorization bypass in AgentGPT through 1.0.0 allows authenticated attackers to hijack other users' agent runs by supplying an arbitrary run_id in the request body, exploiting missing ownership validation in the AgentCRUD.create_task and validate_task_count functions. Successful exploitation enables task history corruption, exhaustion of per-run LLM loop budgets, and financial damage by driving API costs against the victim's account. A public proof-of-concept exists per VulnCheck reporting; no CISA KEV listing is present, and the low CVSS 4.0 score of 2.3 reflects the high attack complexity and constrained integrity/availability impact.