CVE-2026-45023 PUBLISHED

AutoGP: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

Assigner: GitHub_M
Reserved: 08.05.2026 Published: 28.05.2026 Updated: 28.05.2026

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in the graph execution path (manager.py) is never reached when blocks are called directly via the external API, allowing unlimited free execution of all blocks. This vulnerability is fixed in 0.6.59.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS Score: 5.4

Product Status

Vendor Significant-Gravitas
Product AutoGPT
Versions
  • Version < 0.6.59 is affected

References

Problem Types

  • CWE-770: Allocation of Resources Without Limits or Throttling CWE
  • CWE-841: Improper Enforcement of Behavioral Workflow CWE