CVE-2025-41023CWE-287

Authentication bypass in AutoGPT de Thesamur

Medium · published February 19, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00567 · 46.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-02-19T08:50Z
EPSS history
Timeline
  • 19 FEB 08:50Z
    Authentication bypass in AutoGPT de Thesamur
    cvelistv5