Auth bypass in Thesamur Autogpt
CVE-2025-41023
An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.
Vulnerability class: Broken Authentication
EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.
Affected products
- Thesamur Autogpt — versions All versions