CVE-2025-41023CWE-287
Authentication bypass in AutoGPT de Thesamur
Medium · published February 19, 2026
What it is
An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00567 · 46.3th percentile
- Weakness
- CWE-287 · Improper Authentication
- Published
- 2026-02-19T08:50Z
EPSS history
Timeline