Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-29 | 2 | Disclosure1General1 |
| 2026-02-04 | 1 | Disclosure1 |
| 2026-02-22 | 1 | Disclosure1 |
| 2026-02-23 | 1 | Disclosure1 |
| 2026-02-24 | 1 | Disclosure1 |
| 2026-02-25 | 1 | Patch1 |
| 2026-02-27 | 1 | Disclosure1 |
Advisory: https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-r277-3xc5-c79v CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-24780
Post summary
The text shares links to a GitHub advisory and the NVD entry for CVE-2026-24780, indicating a disclosure but providing no further detail.
New vulnerability disclosed: CVE-2026-24780 with a CVSS score of 8.8. AutoGPT is a platform that allows users to create,.... Worth reviewing if this affects your stack. Details: https://threatops.tech/exploit-radar #CVE #InfoSec #VulnMgmt
Post summary
A new vulnerability, CVE-2026-24780, has been disclosed with a high CVSS score; however, no proof of concept, exploit code, active exploitation, or patch information is provided.
CVE-2026-24780 has been published with a CVSS score of 8.8. AutoGPT is a platform that allows users to create,.... Add it to your patching queue if applicable. Details: https://threatops.tech/exploit-radar #CVE #InfoSec #VulnMgmt
Post summary
CVE-2026-24780 is a high‑severity vulnerability (CVSS 8.8) that should be added to patching queues; no PoC or exploitation details are provided.
New vulnerability disclosed: CVE-2026-24780 with a CVSS score of 8.8. AutoGPT is a platform that allows users to create,.... Worth reviewing if this affects your stack. Details: https://threatops.tech/exploit-radar #CVE #InfoSec #VulnMgmt
Post summary
A new vulnerability, CVE-2026-24780, has been disclosed with a CVSS score of 8.8, potentially impacting the AutoGPT platform; further details are available at the provided link.
Security advisory: CVE-2026-24780 with a CVSS score of 8.8. AutoGPT is a platform that allows users to create,.... Check if you need to take action. Details: https://threatops.tech/exploit-radar #CVE #InfoSec #VulnMgmt
Post summary
The advisory announces CVE-2026-24780 with a CVSS score of 8.8 and urges users to check if action is needed, but provides no PoC, exploit, or patch details.
New vulnerability disclosed: CVE-2026-24780 with a CVSS score of 8.8. AutoGPT is a platform that allows users to create,.... Worth reviewing if this affects your stack. Details: https://threatops.tech/exploit-radar #CVE #InfoSec #VulnMgmt
Post summary
A new vulnerability, CVE-2026-24780, has been disclosed with a high CVSS score of 8.8, and a link to further details is provided.
CVE-2026-24780 Remote Code Execution in AutoGPT Platform via Disabled Block Execution Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24780
Post summary
CVE-2026-24780 is a remote code execution vulnerability in the AutoGPT Platform caused by a disabled block execution endpoint; the announcement provides technical details but no proof of exploitation, fix, or PoC.
CVE-2026-24780 AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-plat… https://www.cve.org/CVERecord?id=CVE-2026-24780
Post summary
The entry simply cites CVE‑2026‑24780 and briefly describes the AutoGPT platform, offering no evidence of exploits, patches, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | agpt | autogpt_platform | - | - | - |