Platform
python
Component
agpt
Fixed in
0.1.1
0.2.3
CVE-2026-24780 is a Remote Code Execution (RCE) vulnerability affecting AutoGPT Platform versions up to 0.2.2. This flaw allows authenticated users to execute disabled blocks, potentially leading to arbitrary code execution on the server. A fix is available in version 0.6.44, and users are strongly advised to upgrade immediately.
The vulnerability lies in the block execution endpoints of the AutoGPT Platform, both within the main web API and the external API. The system fails to properly check the disabled flag before executing blocks. An attacker, possessing an authenticated account (either self-registered via Supabase or an existing account), can exploit this to execute the BlockInstallationBlock. This block is designed to write arbitrary Python code to the server's filesystem and then execute it using import(). This effectively grants the attacker remote code execution capabilities, allowing them to compromise the entire server. The potential impact includes data theft, system takeover, and further malicious activity.
CVE-2026-24780 was publicly disclosed on 2026-01-29. There is currently no indication of active exploitation in the wild, but the availability of a public description and the ease of exploitation make it a potential target. The vulnerability has been added to the CISA KEV catalog, indicating a medium probability of exploitation. No public proof-of-concept (PoC) code has been released as of this writing.
Exploit Status
EPSS
0.10% (28% percentile)
CISA SSVC
The primary mitigation is to upgrade AutoGPT Platform to version 0.6.44 or later, which addresses this vulnerability. If an immediate upgrade is not feasible due to compatibility issues or breaking changes, consider temporarily disabling the block execution endpoints or restricting access to them. Implement strict authentication and authorization controls to limit the number of users with access to these endpoints. Monitor system logs for suspicious activity, particularly attempts to execute blocks with unusual names or content. While a WAF or proxy rule could be implemented to filter requests to the vulnerable endpoints, this is not a substitute for patching.
Update AutoGPT to version 0.6.44 or higher. This version fixes the remote code execution vulnerability by correctly verifying the 'disabled' status of blocks before execution. The update prevents authenticated users from executing arbitrary Python code on the server.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2026-24780 is a Remote Code Execution vulnerability in AutoGPT Platform versions up to 0.2.2, allowing authenticated users to execute arbitrary Python code on the server.
You are affected if you are running AutoGPT Platform versions 0.2.2 or earlier. Upgrade to 0.6.44 to resolve the issue.
Upgrade AutoGPT Platform to version 0.6.44 or later. If immediate upgrade is not possible, consider temporary mitigation steps like disabling vulnerable endpoints.
There is currently no confirmed evidence of active exploitation, but the vulnerability's ease of exploitation warrants caution.
Refer to the official AutoGPT Platform security advisories and release notes for details and updates regarding CVE-2026-24780.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.
Upload your requirements.txt file and we'll tell you instantly if you're affected.