CVE-2026-56663

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. _is_ip_blocked() in backend/backend/util/request.py does not normalize IPv4-mapped IPv6 addresses before checking resolved IPs against the blocked IPv4 ranges, and does not block special-use ranges such as 100.64.0.0/10 (CGNAT, RFC 6598). A hostname that resolves to an IPv4-mapped IPv6 address therefore passes validation and the request reaches the embedded internal IPv4 endpoint. This affects all AutoGPT Platform deployments. This vulnerability is fixed in 0.6.52.

• CWE-918

• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-8qc5-rhmg-r6r6
• https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-8qc5-rhmg-r6r6

Published

Jun 26, 2026

Last Modified

Jun 26, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56650Heap-based buffer overflow in Windows Network File System al…7.8
• CVE-2026-56651Dool in versions up to 1.3.8 is vulnerable to symlink follow…2
• CVE-2026-56652Dool in versions up to 1.3.8 is vulnerable to a CSV injectio…4.6
• CVE-2026-56654Privilege Escalation via Access Token Scope Escalation in AP…9.8
• CVE-2026-56657Gitea SSH Key Parser Denial of Service6.2
• CVE-2026-5666A vulnerability was detected in code-projects Online FIR Sys…5.5
• CVE-2026-56664ZITADEL is an open source identity management platform. Prio…4.2
• CVE-2026-56665ZITADEL is an open source identity management platform. Prio…4.2
• CVE-2026-56666ZITADEL is an open source identity management platform. Prio…4.8
• CVE-2026-56667ZITADEL is an open source identity management platform. Prio…7.3
• CVE-2026-56668ZITADEL is an open source identity management platform. Prio…8.1
• CVE-2026-56669Elysia is a Typescript framework for request validation, typ…7.5