Skip to main content

Autogpt Classic

8 CVEs product

Monthly

CVE-2024-8156 Mar 20, 10:15 CRITICAL POC PATCH Act Now

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
9.8
EPSS
2.6%
CVE-2024-6091 Sep 11, 13:15 PyPI CRITICAL POC PATCH Act Now

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-1881 Jun 06, 19:15 CRITICAL PATCH Act Now

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
9.8
EPSS
1.4%
CVE-2024-1880 Jun 06, 19:15 HIGH POC PATCH This Week

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

RCE Command Injection Apple Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
7.8
EPSS
1.0%
CVE-2024-1879 Jun 06, 18:15 HIGH POC PATCH This Week

A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CSRF Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
8.8
EPSS
0.5%
CVE-2023-37275 Jul 13, 23:15 MEDIUM PATCH This Month

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Autogpt Classic Agpt
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2023-37274 Jul 13, 23:15 HIGH PATCH This Week

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Docker Path Traversal Code Injection +2
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-37273 Jul 13, 23:15 HIGH PATCH This Week

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Docker Code Injection Autogpt Classic +1
NVD GitHub
CVSS 3.1
8.8
EPSS
0.3%
EPSS 3% CVSS 9.8
CRITICAL POC PATCH Act Now

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Autogpt Classic Agpt
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Autogpt Classic Agpt
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Autogpt Classic Agpt
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC PATCH This Week

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

RCE Command Injection Apple +2
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC PATCH This Week

A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CSRF Autogpt Classic Agpt
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Autogpt Classic Agpt
NVD GitHub
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Docker +4
NVD GitHub
EPSS 0% CVSS 8.8
HIGH PATCH This Week

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Docker +3
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy