Executive brief
AutoGPT is an automation platform used to create and manage autonomous AI agents. A vulnerability in how the system handles file downloads allows a malicious user to force the platform to download an unlimited number of files, eventually filling up the server's disk space. This can lead to a complete service outage (Denial of Service), preventing the platform and its AI agents from functioning.
Technical details
A Denial of Service (DoS) vulnerability exists in AutoGPT due to uncontrolled resource consumption in the `StepThroughItemsBlock` and `FileStoreBlock` components. The `StepThroughItemsBlock` can iterate through an unlimited number of items in a list and pass them to `FileStoreBlock` for sequential downloading. While `FileStoreBlock` implements access time limits, it lacks restrictions on the total volume of data or the number of files stored in the working directory. An attacker can exploit this by providing a large list of external URLs (e.g., high-resolution videos), leading to disk space exhaustion. Furthermore, the use of countdown timers can delay agent cleanup, resulting in a persistent DoS state. This issue is resolved in version 0.6.63.
Affected products
- Significant-Gravitas AutoGPT < 0.6.63
Timeline
- 2026-06-11: advisory: GitHub Security Advisory published
- 2026-06-18: disclosed: NVD publication date