CVE-2025-32394

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

CVSS

No CVSS.

References

Link	Resource
https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-955p-gpfx-r66j

Configurations

No configuration.

History

29 Sep 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) AutoGPT es una plataforma de automatización de flujos de trabajo para crear, desplegar y gestionar agentes de inteligencia artificial continuos. Antes de la versión 0.6.32, existe una vulnerabilidad DoS en AITextSummarizerBlock. Usuarios maliciosos pueden amplificar su entrada. Por ejemplo, si un usuario malicioso introduce 10K de contenido, el servidor consumirá 50G de memoria, lo que eventualmente provocará el agotamiento de los recursos de memoria, resultando en DoS. Esta vulnerabilidad está corregida en la versión 0.6.32.

Information

Published : 2026-06-26 17:16

Updated : 2026-09-29 19:10

NVD link : CVE-2025-32394

Mitre link : CVE-2025-32394

CVE.ORG link : CVE-2025-32394

JSON object : View

Products Affected

No product.

CWE

CWE-405

Asymmetric Resource Consumption (Amplification)

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2025-32394", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-32394", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-27T02:39:16.861455Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Significant-Gravitas", "product": "AutoGPT", "versions": [{"status": "affected", "version": "< 0.6.32"}]}]}], "published": "2026-06-26T17:16:31.413", "references": [{"url": "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-955p-gpfx-r66j", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-405"}, {"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32."}, {"lang": "es", "value": "AutoGPT es una plataforma de automatizaci\u00f3n de flujos de trabajo para crear, desplegar y gestionar agentes de inteligencia artificial continuos. Antes de la versi\u00f3n 0.6.32, existe una vulnerabilidad DoS en AITextSummarizerBlock. Usuarios maliciosos pueden amplificar su entrada. Por ejemplo, si un usuario malicioso introduce 10K de contenido, el servidor consumir\u00e1 50G de memoria, lo que eventualmente provocar\u00e1 el agotamiento de los recursos de memoria, resultando en DoS. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 0.6.32."}], "lastModified": "2026-09-29T19:10:00.160", "sourceIdentifier": "security-advisories@github.com"}