CVE-2026-30950

{"id": "CVE-2026-30950", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30950", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-19T12:57:11.653348Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Significant-Gravitas", "product": "AutoGPT", "versions": [{"status": "affected", "version": ">= 0.6.36, < 0.6.51"}]}]}], "published": "2026-05-18T23:16:33.190", "references": [{"url": "https://github.com/Significant-Gravitas/AutoGPT/commit/eca7b5e79370c34ed75e80badb824023d7d8629d", "source": "security-advisories@github.com"}, {"url": "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-q58p-v9r9-7gqj", "source": "security-advisories@github.com"}, {"url": "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-q58p-v9r9-7gqj", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, they can take it over, reading any messages in it and locking the legitimate user out. The PATCH /sessions/{session_id}/assign-user endpoint authenticates the caller but never verifies session ownership: the service layer invokes the session lookup with user_id=None, which the data access layer interprets as a privileged/system call that bypasses the ownership filter, allowing any authenticated user to reassign an arbitrary session to themselves. This issue has been patched in version 0.6.51."}, {"lang": "es", "value": "AutoGPT es una plataforma de automatizaci\u00f3n de flujos de trabajo para crear, desplegar y gestionar agentes de inteligencia artificial continuos. Las versiones 0.6.36 a la 0.6.50 son vulnerables a un secuestro de sesi\u00f3n autenticada a trav\u00e9s de IDOR. Si un atacante autenticado puede determinar el session_id de la sesi\u00f3n de otro usuario, puede tomar el control de esta, leyendo cualquier mensaje en ella y bloqueando al usuario leg\u00edtimo. El endpoint PATCH /sessions/{session_id}/assign-user autentica al llamador pero nunca verifica la propiedad de la sesi\u00f3n: la capa de servicio invoca la b\u00fasqueda de sesi\u00f3n con user_id=None, lo que la capa de acceso a datos interpreta como una llamada privilegiada/de sistema que omite el filtro de propiedad, permitiendo a cualquier usuario autenticado reasignarse a s\u00ed mismo una sesi\u00f3n arbitraria. Este problema ha sido parcheado en la versi\u00f3n 0.6.51."}], "lastModified": "2026-07-24T13:10:00.223", "sourceIdentifier": "security-advisories@github.com"}