CVE-2026-26020 Details
Description
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.48, an authenticated user could achieve Remote Code Execution (RCE) on the backend server by embedding a disabled block inside a graph. The BlockInstallationBlock — a development tool capable of writing and importing arbitrary Python code — was marked disabled=True, but graph validation did not enforce this flag. This allowed any authenticated user to bypass the restriction by including the block as a node in a graph, rather than calling the block's execution endpoint directly (which did enforce the flag). This vulnerability is fixed in 0.6.48.
A remote code execution vulnerability has been identified in AutoGPT versions prior to 0.6.48. This issue allows authenticated users to execute arbitrary code on the backend server by embedding a disabled development block, known as BlockInstallationBlock, into a graph. The vulnerability arises because the graph validation process did not properly enforce the disabled flag, allowing the block to be executed indirectly through the graph.
Users running a self-hosted instance of AutoGPT Platform should update to version 0.6.48 immediately. After updating, check for any signs of exploitation by querying the database for graphs that reference the vulnerable BlockInstallationBlock, and look for unauthorized files written to disk that are not part of the repository. If evidence of exploitation is found, treat the instance as compromised and rotate all secrets in the backend environment.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-285 | Improper Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| agpt autogpt platform | < 0.6.48 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 17, 2026 | Initial Analysis | [email protected] |
| Feb 12, 2026 | New CVE Received | [email protected] |