CVE-2026-24780
2 advisories.
PyPI/agpt CVE-2026-24780: high, EPSS 1.28%
AutoGPT is Vulnerable to RCE via Disabled Block Execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r277-3xc5-c79v
- https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-r277-3xc5-c79v
- https://nvd.nist.gov/vuln/detail/CVE-2026-24780
- https://github.com/Significant-Gravitas/AutoGPT
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L1408-L1424
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/block.py#L15-L78
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/data/block.py#L459
CVE-2026-24780 · published · modified · JSON
PyPI/agpt CVE-2026-24780: unknown, EPSS 1.28%
AutoGPT is Vulnerable to RCE via Disabled Block Execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1078
- https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-r277-3xc5-c79v
- https://nvd.nist.gov/vuln/detail/CVE-2026-24780
- https://github.com/Significant-Gravitas/AutoGPT
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/external/v1/routes.py#L79-L93
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L1408-L1424
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/api/features/v1.py#L355-L395
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/blocks/block.py#L15-L78
- https://github.com/Significant-Gravitas/AutoGPT/blob/master/autogpt_platform/backend/backend/data/block.py#L459
- https://pypi.org/project/agpt
- https://github.com/advisories/GHSA-r277-3xc5-c79v
CVE-2026-24780 · published · modified · JSON