CVE-2025-32394

AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

State: Published
Severity: 5.3 Medium
Published: Jun 26, 2026
Updated: Jun 27, 2026
Reserved: Apr 6, 2025

Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	GitHub_M

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling
CWE-405 Asymmetric Resource Consumption (Amplification)

Affected Products

Product	Versions
AutoGPTSignificant-Gravitas	< 0.6.32Affected

References

https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-955p-gpfx-r66j

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.