What is CVE-2026-72922?

CVE-2026-72922 is a high-severity vulnerability in Significant-gravitas Autogpt, classified under Improper Authentication. CVSS score: 8.2/10. Published 2026-08-11.

How severe is CVE-2026-72922?

High severity. CVSS v3 base score is 8.2 out of 10.

Auth bypass in Significant-gravitas Autogpt

CVE-2026-72922

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogpt_platform/backend/backend/api/features/integrations/router.py webhook_ingress_gene…

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N.

Affected products

Significant-gravitas Autogpt — versions < 0.6.70

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-72922?: CVE-2026-72922 is a high-severity vulnerability in Significant-gravitas Autogpt, classified under Improper Authentication. CVSS score: 8.2/10. Published 2026-08-11.
How severe is CVE-2026-72922?: High severity. CVSS v3 base score is 8.2 out of 10.