Data Handling Flaw in AutoGPT by Significant Gravitas

CVE-2025-32436

What is CVE-2025-32436?

AutoGPT, a workflow automation platform for managing artificial intelligence agents, has a resource handling flaw that can lead to denial of service (DoS). Versions prior to 0.6.63 leverage the AddAudioToVideoBlock and StepThroughItemsBlock, which do not appropriately manage temporary media files during processes. Specifically, the system fails to delete these files, and StepThroughItemsBlock can execute indefinite loops without limits. This can cause excessive disk space consumption, particularly if a malicious user initiates multiple media processing tasks, ultimately resulting in a system slowdown or crash. Users are advised to update to version 0.6.63, which addresses this issue.

References