What’s Vulnerable › Vulnerabilities
CVE-2025-32394: AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock
- Severity: medium (CVSS 5.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-26 · updated 2026-09-29
- Weakness: CWE-405
Description
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.
Affected products
- Significant-Gravitas AutoGPT: before 0.6.32
References
Get alerted when CVE-2025-32394 or the next vulnerability affects your stack