CVE-2026-33232

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an unauthenticated Denial of Service (DoS) through the server due to uncontrolled disk space consumption. The download_agent_file endpoint creates persistent temporary files for every request but fails to delete them after they are served. An unauthenticated attacker can repeatedly call this endpoint to exhaust the server's disk space, causing the database or other system services to fail due to "No space left on device" errors, rendering the entire AutoGPT Platform backend unavailable to all users. This issue has been patched in version 0.6.52.

• CWE-400
• CWE-459
• CWE-770

• https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.52
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-374w-2pxq-c9jp
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-374w-2pxq-c9jp

Published

May 19, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33227Improper validation and restriction of a classpath path name…4.3
• CVE-2026-33228flatted is a circular JSON parser. Prior to version 3.4.2, t…9.8
• CVE-2026-33229XWiki Platform is a generic wiki platform offering runtime s…9.8
• CVE-2026-3323An unsecured configuration interface on affected devices all…7.5
• CVE-2026-33230NLTK (Natural Language Toolkit) is a suite of open source Py…6.1
• CVE-2026-33231NLTK (Natural Language Toolkit) is a suite of open source Py…7.5
• CVE-2026-33233AutoGPT is a workflow automation platform for creating, depl…7.6
• CVE-2026-33234AutoGPT is a workflow automation platform for creating, depl…5
• CVE-2026-33235AutoGPT is a workflow automation platform for creating, depl…7.7
• CVE-2026-33236NLTK (Natural Language Toolkit) is a suite of open source Py…8.1
• CVE-2026-33237WWBN AVideo is an open source video platform. Prior to versi…5.5
• CVE-2026-33238WWBN AVideo is an open source video platform. Prior to versi…4.3