CVE-2025-32393

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.32, there is a DoS vulnerability in ReadRSSFeedBlock. In RSSBlock, feedparser.parser is called to obtain the XML file according to the URL input by the user, parse the XML, and finally obtain the parsed result. However, during the parsing process, there is no limit on the parsing time and the resources that can be allocated for parsing. When a malicious user lets RSSBlock parse a carefully constructed, deep XML, it will cause memory resources to be exhausted, eventually causing DoS. This issue has been patched in autogpt-platform-beta-v0.6.32.

• CWE-770

• https://github.com/Significant-Gravitas/AutoGPT/commit/57a06f70883ce6be18738c6ae8bb41085c71e266Patch
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-5cqw-g779-9f9xExploit, Vendor Advisory

Published

Feb 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-32388SvelteKit is a framework for rapidly developing robust, perf…5.4
• CVE-2025-32389NamelessMC is a free, easy to use & powerful website softwar…6.5
• CVE-2025-3239A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2025-32390EspoCRM is a free, open-source customer relationship managem…8.5
• CVE-2025-32391HedgeDoc is an open source, real-time, collaborative, markdo…4.6
• CVE-2025-32392AutoGPT is a workflow automation platform for creating, depl…8.7
• CVE-2025-32394AutoGPT is a workflow automation platform for creating, depl…5.3
• CVE-2025-32395Vite is a frontend tooling framework for javascript. Prior t…6
• CVE-2025-32396An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1…7.5
• CVE-2025-32397An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1…7.5
• CVE-2025-32398A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or…7.5
• CVE-2025-32399An Unchecked Input for Loop Condition in RT-Labs P-Net versi…7.5