CVE-2026-24780

Description

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.44, AutoGPT Platform's block execution endpoints (both main web API and external API) allow executing blocks by UUID without checking the `disabled` flag. Any authenticated user can execute the disabled `BlockInstallationBlock`, which writes arbitrary Python code to the server filesystem and executes it via `__import__()`, achieving Remote Code Execution. In default self-hosted deployments where Supabase signup is enabled, an attacker can self-register; if signup is disabled (e.g., hosted), the attacker needs an existing account. autogpt-platform-beta-v0.6.44 contains a fix.

PUBLISHED Reserved 2026-01-26 | Published 2026-01-29 | Updated 2026-01-29 | Assigner GitHub_M

Problem types

CWE-863: Incorrect Authorization

CWE-94: Improper Control of Generation of Code ('Code Injection')

CWE-276: Incorrect Default Permissions

Product status

References

github.com/...utoGPT/security/advisories/GHSA-r277-3xc5-c79v

github.com/...form/backend/backend/api/external/v1/routes.py

github.com/...pt_platform/backend/backend/api/features/v1.py

github.com/...pt_platform/backend/backend/api/features/v1.py

github.com/...togpt_platform/backend/backend/blocks/block.py

github.com/...autogpt_platform/backend/backend/data/block.py

cve.org (CVE-2026-24780)

nvd.nist.gov (CVE-2026-24780)

Download JSON