CVE-2026-45023 Details
Description
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in the graph execution path (manager.py) is never reached when blocks are called directly via the external API, allowing unlimited free execution of all blocks. This vulnerability is fixed in 0.6.59.
A vulnerability in AutoGPT, prior to version 0.6.59, allows authenticated users to execute blocks via the external API without deducting any credits. This issue arises because the credit check is only applied during normal graph execution, leaving a gap when blocks are executed directly through the API. As a result, users can exploit this to run any block for free, bypassing the platform's billing and rate-limiting mechanisms. This vulnerability is particularly impactful when combined with another reported issue that bypasses human oversight, allowing sensitive actions to be executed without cost or approval.
Users can update to AutoGPT version 0.6.59 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 28, 2026CISA-ADP
Assessed May 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-8pjg-mfqm-vrhr | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-8pjg-mfqm-vrhr | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
| CWE-841 | Improper Enforcement of Behavioral Workflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Significant-Gravitas AutoGPT | <= autogpt-platform-beta-v0.6.58 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 29, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | New CVE Received | [email protected] |