CVE-2025-22603

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22603
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Versions prior to autogpt-platform-beta-v0.4.2 contains a server-side request forgery (SSRF) vulnerability inside component (or block) `Send Web Request`. The root cause is that IPV6 address is not restricted or filtered, which allows attackers to perform a server side request forgery to visit an IPV6 service. autogpt-platform-beta-v0.4.2 fixes the issue.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://boatneck-faucet-cba.notion.site/SSRF-of-AutoGPT-153b650a4d88804d923ad65a015a7d61 Exploit Third Party Advisory
https://github.com/Significant-Gravitas/AutoGPT/blob/2121ffd06b26a438706bf642372cc46d81c94ddc/autogpt_platform/backend/backend/util/request.py#L11 Product
https://github.com/Significant-Gravitas/AutoGPT/commit/26214e1b2c6777e0fae866642b23420adaadd6c4 Patch
https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-4c8v-hwxc-2356 Exploit Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:agpt:autogpt_platform:*:beta:*:*:*:*:*:*
History

28 Jan 2026, 17:24

Type Values Removed Values Added
CPE cpe:2.3:a:agpt:autogpt_platform:*:beta:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1
First Time Agpt autogpt Platform
Agpt
Summary
  • (es) AutoGPT es una plataforma que permite a los usuarios crear, implementar y administrar agentes de inteligencia artificial continuos que automatizan flujos de trabajo complejos. Las versiones anteriores a autogpt-platform-beta-v0.4.2 contienen una vulnerabilidad de server-side request forgery (SSRF) dentro del componente (o bloque) `Send Web Request`. La causa principal es que la dirección IPV6 no está restringida ni filtrada, lo que permite a los atacantes realizar server side request forgery para visitar un servicio IPV6. autogpt-platform-beta-v0.4.2 soluciona el problema.
References () https://boatneck-faucet-cba.notion.site/SSRF-of-AutoGPT-153b650a4d88804d923ad65a015a7d61 - () https://boatneck-faucet-cba.notion.site/SSRF-of-AutoGPT-153b650a4d88804d923ad65a015a7d61 - Exploit, Third Party Advisory
References () https://github.com/Significant-Gravitas/AutoGPT/blob/2121ffd06b26a438706bf642372cc46d81c94ddc/autogpt_platform/backend/backend/util/request.py#L11 - () https://github.com/Significant-Gravitas/AutoGPT/blob/2121ffd06b26a438706bf642372cc46d81c94ddc/autogpt_platform/backend/backend/util/request.py#L11 - Product
References () https://github.com/Significant-Gravitas/AutoGPT/commit/26214e1b2c6777e0fae866642b23420adaadd6c4 - () https://github.com/Significant-Gravitas/AutoGPT/commit/26214e1b2c6777e0fae866642b23420adaadd6c4 - Patch
References () https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-4c8v-hwxc-2356 - () https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-4c8v-hwxc-2356 - Exploit, Patch, Vendor Advisory

10 Mar 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-10 19:15

Updated : 2026-01-28 17:24

NVD link : CVE-2025-22603

Mitre link : CVE-2025-22603

CVE.ORG link : CVE-2025-22603

JSON object : View

Products Affected

agpt

  • autogpt_platform
CWE
CWE-918

Server-Side Request Forgery (SSRF)