Executive brief
AutoGPT is a platform used to create and manage autonomous AI agents. A security flaw in its backend allows anyone on the internet to crash the service by repeatedly requesting a specific file download. This process fills up the server's hard drive with temporary files that are never deleted, eventually causing the database and the entire platform to stop working for all users.
Technical details
A Denial of Service (DoS) vulnerability exists in the AutoGPT platform backend due to improper resource cleanup in the `download_agent_file` endpoint. The vulnerable function uses `tempfile.NamedTemporaryFile` with `delete=False` to generate agent files but fails to implement a mechanism to delete these files after they are served by FastAPI's `FileResponse`. Because this endpoint is publicly accessible and requires no authentication, a remote attacker can automate repeated requests to fill the host's temporary storage directory. This leads to 'No space left on device' errors, causing the backend database and other critical system services to fail. The issue is addressed in version 0.6.52 by ensuring temporary files are properly removed.
Affected products
- Significant-Gravitas AutoGPT Platform Backend 0.4.2 - 0.6.51
Timeline
- 2026-05-11: advisory: GitHub Security Advisory GHSA-374w-2pxq-c9jp published
- 2026-05-18: disclosed: CVE-2026-33232 published to NVD
- 2026-03-20: patched: Version 0.6.52 released with fix