Resource exhaustion in Significant-gravitas Autogpt
CVE-2026-33232
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an unauthenticated Denial of Service (DoS) through the server due to…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.001 (21.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Significant-gravitas Autogpt — versions >= 0.4.2, < 0.6.52
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-33232?
- CVE-2026-33232 is a high-severity vulnerability in Significant-gravitas Autogpt, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2026-05-19.
- How severe is CVE-2026-33232?
- High severity. CVSS v3 base score is 7.5 out of 10.