CVE-2026-45023

AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

State: Published
Severity: 5.4 Medium
Published: May 28, 2026
Updated: Jun 18, 2026
Reserved: May 8, 2026

Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in the graph execution path (manager.py) is never reached when blocks are called directly via the external API, allowing unlimited free execution of all blocks. This vulnerability is fixed in 0.6.59.

Scores

CVSS	Score	Vector	Source
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L	GitHub_M

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling
CWE-841 Improper Enforcement of Behavioral Workflow

Affected Products

Product	Versions
AutoGPTSignificant-Gravitas	< 0.6.59Affected

References

https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-8pjg-mfqm-vrhr

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.