Webhook Bypass in AutoGPT Workflow Automation Platform

CVE-2026-72922

What is CVE-2026-72922?

The AutoGPT platform, designed for creating and managing AI agents, has a vulnerability that permits a webhook integration to bypass necessary security checks due to improper handling of an untrusted provider URL segment. This flaw allows unauthorized execution of generic webhook functionality without validating the required security tokens. The issue has been rectified in version 0.6.70, emphasizing the need for users to update their systems promptly to maintain secure operations.

References