CVE-2025-31491

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows of leakage of cross-domain cookies and protected headers in requests redirect. AutoGPT uses a wrapper around the requests python library, located in autogpt_platform/backend/backend/util/request.py. In this wrapper, redirects are specifically NOT followed for the first request. If the wrapper is used with allow_redirects set to True (which is the default), any redirect is not followed by the initial request, but rather re-requested by the wrapper using the new location. However, there is a fundamental flaw in manually re-requesting the new location: it does not account for security-sensitive headers which should not be sent cross-origin, such as the Authorization and Proxy-Authorization header, and cookies. For example in autogpt_platform/backend/backend/blocks/github/_api.py, an Authorization header is set when retrieving data from the GitHub API. However, if GitHub suffers from an open redirect vulnerability (such as the made-up example of https://api.github.com/repos/{owner}/{repo}/issues/comments/{comment_id}/../../../../../redirect/?url=https://joshua.hu/), and the script can be coerced into visiting it with the Authorization header, the GitHub credentials in the Authorization header will be leaked. This allows leaking auth headers and private cookies. This vulnerability is fixed in 0.6.1.

• CWE-200
• CWE-601

• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-ggcm-93qg-gfhpExploit, Vendor Advisory

Published

Apr 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31486Vite is a frontend tooling framework for javascript. The con…5.3
• CVE-2025-31487The XWiki JIRA extension provides various integration points…7.7
• CVE-2025-31488Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL …4.9
• CVE-2025-31489MinIO is a High Performance Object Storage released under GN…8.7
• CVE-2025-3149A vulnerability was found in itning Student Homework Managem…4.8
• CVE-2025-31490AutoGPT is a platform that allows users to create, deploy, a…7.5
• CVE-2025-31492mod_auth_openidc is an OpenID Certified authentication and a…8.2
• CVE-2025-31493Kirby is an open-source content management system. A vulnera…9.1
• CVE-2025-31494AutoGPT is a platform that allows users to create, deploy, a…3.5
• CVE-2025-31496apollo-compiler is a query-based compiler for the GraphQL qu…7.5
• CVE-2025-31497TEIGarage is a webservice and RESTful service to transform, …7.5
• CVE-2025-31498c-ares is an asynchronous resolver library. From 1.32.3 thro…8.3