CVE-2026-33232Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an unauthenticated Denial of Service (DoS) through the server due to uncontrolled disk space consumption. The download_agent_file endpoint creates persistent temporary files for every request but fails to delete them after they are served. An unauthenticated attacker can repeatedly call this endpoint to exhaust the server's disk space, causing the database or other system services to fail due to "No space left on device" errors, rendering the entire AutoGPT Platform backend unavailable to all users. This issue has been patched in version 0.6.52.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-400CWE-459CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-19: 2Technical Details · 2026-05-19: 105-19
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-33232 AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerabl… https://www.cve.org/CVERecord?id=CVE-2026-33232

    Post summary

    The post simply references a CVE record for AutoGPT, noting a range of vulnerable versions but offering no further technical, exploit, patch, or mitigation information.

    00000163
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-33232 Unauthenticated Denial of Service via Uncontrolled Disk Space Consumption in AutoGPT 0.4.2-0.6.51 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33232

    Post summary

    CVE‑2026‑33232 is an unauthenticated denial‑of‑service vulnerability in AutoGPT caused by uncontrolled disk‑space consumption, disclosed with technical details but without any PoC, exploit code, patch information, or evidence of active exploitation.

    0000051
    4.0K followersView on X

Explore more