Authorization Bypass Vulnerability in AutoGPT Platform
CVE-2025-53944

7.7HIGH

Key Information:

Vendor

Significant-Gravitas

Status
AutoGPT
Vendor
CVE Published:
30 July 2025

What is CVE-2025-53944?

The AutoGPT platform, designed to facilitate the creation and management of AI agents, contains an authorization bypass vulnerability in versions v0.6.15 and earlier. This flaw exists within the get_graph_execution_results endpoint of the external API, where it appropriately validates user access to the graph_id. However, it inadequately checks the ownership of the graph_exec_id parameter, allowing authenticated users to exploit the issue by gaining unauthorized access to any execution results. The internal API ensures correct validation, but this gap poses significant security risks. The vulnerability has been addressed in version v0.6.16, which enhances the validation process to safeguard sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/Significant-Gravitas/AutoGPT/commit/30...
https://github.com/Significant-Gravitas/AutoGPT/releases/...
https://github.com/Significant-Gravitas/AutoGPT/security/...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.