Is CVE-2026-33234 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-33234 being exploited in the wild.

How severe is CVE-2026-33234?

Medium severity, with a CVSS score of 5, published 19 May 2026.

Which products and versions are affected?

Significant-Gravitas AutoGPT Platform Backend 0.1.0 - 0.6.51.

Is there a fix for CVE-2026-33234?

A patch was published on 2026-03-20: Version 0.6.52 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-33234 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-33234?

Check whether you run Significant-Gravitas AutoGPT Platform Backend at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33234: Significant-Gravitas AutoGPT SSRF in SendEmailBlock

CVE-2026-33234 · Severity: medium · CVSS 5 · Published 2026-05-19

AutoGPT is an automation platform used to create and manage AI agents. A security flaw in the platform's email component allows users to bypass safety restrictions and connect to internal network resources that should be private. An attacker could use this to map out a company's internal servers, identify running services like databases, and gather technical details that could be used for further attacks.

Technologies: Significant-Gravitas AutoGPT Platform Backend. Vendors: Significant-Gravitas.

Quick answers

Is CVE-2026-33234 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-33234 being exploited in the wild.
How severe is CVE-2026-33234?: Medium severity, with a CVSS score of 5, published 19 May 2026.
Which products and versions are affected?: Significant-Gravitas AutoGPT Platform Backend 0.1.0 - 0.6.51.
Is there a fix for CVE-2026-33234?: A patch was published on 2026-03-20: Version 0.6.52 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-33234 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-33234?: Check whether you run Significant-Gravitas AutoGPT Platform Backend at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The SendEmailBlock in `autogpt_platform/backend/backend/blocks/email_block.py` accepts user-supplied `smtp_server` and `smtp_port` values and passes them directly to Python's `smtplib.SMTP()` without validation. This bypasses the platform's standard SSRF protections (validate_url_host and BLOCKED_IP_NETWORKS) which are enforced for other outbound request types. Because `smtplib` captures TCP banners from the target service and includes them in exception messages returned to the user interface, an authenticated attacker can perform non-blind port scanning and service fingerprinting of internal infrastructure, including loopback, private IP ranges, and cloud metadata endpoints. The vulnerability is fixed in version 0.6.52 by implementing IP validation and improved error handling.

Affected products

Significant-Gravitas AutoGPT Platform (backend) 0.1.0 - 0.6.51

Timeline

2026-03-20: patched: Version 0.6.52 released
2026-05-13: advisory: GitHub Security Advisory published
2026-05-19: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.