CVE-2025-32423CWE-770denial-of-service

CVE-2025-32423

published June 26, 2026

CVSS
5.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-06-26T21:16Z
References (2)
https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-pppq-xx2w-7jpq · [email protected]https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-pppq-xx2w-7jpq · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 26 JUN 16:09Z
    AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock
    cvelistv5