VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 4, 2026· Updated Feb 5, 2026

AutoGPT has SSRF vulnerability in ReadRSSFeedBlock

CVE-2025-62615

Description

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.34, in RSSFeedBlock, the third-party library urllib.request.urlopen is used directly to access the URL, but the input URL is not filtered, which will cause SSRF vulnerability. This issue has been patched in autogpt-platform-beta-v0.6.34.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Significant Gravitas/Autogptllm-fuzzy2 versions
    < autogpt-platform-beta-v0.0.6.34+ 1 more
    • (no CPE)range: < autogpt-platform-beta-v0.0.6.34
    • (no CPE)range: < autogpt-platform-beta-v0.6.34

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.