PatchTheCVEautogpt classic vulnerabilities and fixes
Recent CVEs affecting autogpt classic, with upgrade or downgrade steps. 5 tracked.
Also searched as: autogptclassic.
autogpt classic has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-03-20. Highest priority: CVE-2024-8156 (score 64/100).
- CVE-2024-8156 CRITICAL 9.8 UPGRADE A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt
- CVE-2024-6091 CRITICAL 9.8 DOWNGRADE A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands
- CVE-2024-1881 CRITICAL 9.8 UPGRADE AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special e
- CVE-2024-1880 HIGH 7.8 UPGRADE An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gra
- CVE-2024-1879 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attack
FAQ
How do I fix autogpt classic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is autogpt classic being exploited right now?
None of the tracked autogpt classic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which autogpt classic CVE should I patch first?
CVE-2024-8156 currently ranks highest (64/100): A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt.