CVE-2025-32392

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to input a video file and process the video, such as looping it 5 times or extending the time, and finally writing it to disk. However, there is no limit on the resources that can be allocated during execution. For example, the number of loops is user-controllable and unlimited. When a malicious attacker loops too many times, the generated video is too large, and after writing it to disk, the disk space is exhausted, eventually causing DoS. Version 0.6.63 patches the issue.

• CWE-400

• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-267x-8jx3-gg6w
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-267x-8jx3-gg6w

Published

Jun 18, 2026

Last Modified

Jun 18, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-32387Helm is a package manager for Charts for Kubernetes. A JSON …6.5
• CVE-2025-32388SvelteKit is a framework for rapidly developing robust, perf…5.4
• CVE-2025-32389NamelessMC is a free, easy to use & powerful website softwar…6.5
• CVE-2025-3239A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2025-32390EspoCRM is a free, open-source customer relationship managem…8.5
• CVE-2025-32391HedgeDoc is an open source, real-time, collaborative, markdo…4.6
• CVE-2025-32393AutoGPT is a platform that allows users to create, deploy, a…6.5
• CVE-2025-32394AutoGPT is a workflow automation platform for creating, depl…5.3
• CVE-2025-32395Vite is a frontend tooling framework for javascript. Prior t…6
• CVE-2025-32396An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1…7.5
• CVE-2025-32397An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1…7.5
• CVE-2025-32398A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or…7.5