Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The autogpt before 0.6.32 is vulnerable to Regular Expression Denial of Service due to the use of regex at Code Extraction Block. The two Regex are used containing the corresponding dangerous patterns \s+[\s\S]*? and \s+(.*?). They share a common characteristic — the combination of two adjacent quantifiers that can match the same space character (\s). As a result, an attacker can supply a long sequence of space characters to trigger excessive regex backtracking, potentially leading to a Denial of Service (DoS). This vulnerability is fixed in 0.6.32.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-10 | 1 | General1 |
| 2026-02-11 | 1 | Disclosure1 |
CVE-2026-26006 Regular Expression Denial of Service Vulnerability in AutoGPT Before 0.6.32 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26006
Post summary
A regular expression Denial‑of‑Service vulnerability (CVE‑2026‑26006) affecting AutoGPT versions prior to 0.6.32 has been disclosed. No PoC, exploit, active exploitation, or patch information is provided in the text.
CVE-2026-26006 AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The autogpt before 0.… https://www.cve.org/CVERecord?id=CVE-2026-26006
Post summary
The text references CVE-2026-26006 and includes a link to its CVE record, but provides no further technical, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | agpt | autogpt_platform | - | - | - |