Is CVE-2026-33235 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-33235 being exploited in the wild.

How severe is CVE-2026-33235?

High severity, with a CVSS score of 7.7, published 24 June 2026.

Which products and versions are affected?

Significant-Gravitas AutoGPT >= 0.1.0, < 0.6.52.

Is there a fix for CVE-2026-33235?

A patch was published on 2026-03-20: Release of version 0.6.52 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-33235 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-33235?

Check whether you run Significant-Gravitas AutoGPT at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33235: Significant-Gravitas AutoGPT DoS in Fill Text Template block

Q: Is there a fix for CVE-2026-33235?

A patch was published on 2026-03-20: Release of version 0.6.52 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-33235 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-33235?

Check whether you run Significant-Gravitas AutoGPT at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33235 · Severity: high · CVSS 7.7 · Published 2026-06-24

AutoGPT, a platform for managing AI agents, is vulnerable to a denial-of-service attack through its text templating feature. An attacker can submit complex commands that overwhelm the server's processor and memory, causing the entire system to crash or stop responding. This can lead to a total service outage for all users and requires manual intervention by an administrator to restore operations.

Technologies: Significant-Gravitas AutoGPT. Vendors: Significant-Gravitas.

Quick answers

Is CVE-2026-33235 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-33235 being exploited in the wild.
How severe is CVE-2026-33235?: High severity, with a CVSS score of 7.7, published 24 June 2026.
Which products and versions are affected?: Significant-Gravitas AutoGPT >= 0.1.0, < 0.6.52.
Is there a fix for CVE-2026-33235?: A patch was published on 2026-03-20: Release of version 0.6.52 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-33235 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-33235?: Check whether you run Significant-Gravitas AutoGPT at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Fill Text Template block in AutoGPT's backend is vulnerable to a Denial of Service (DoS) via uncontrolled resource consumption (CWE-400). While the application uses a SandboxedEnvironment to prevent unauthorized attribute access (SSTI), it fails to implement execution timeouts or computational complexity limits for Jinja2 expressions. A remote attacker with low privileges can submit computationally expensive payloads (e.g., massive exponential calculations) that exhaust CPU and memory, leading to a system hang or OOM crash. This effectively locks the execution queue for all users in multi-tenant environments. The issue is fixed in version 0.6.52 by introducing resource governance.

Affected products

Significant-Gravitas AutoGPT >= 0.1.0, < 0.6.52

Timeline

2026-03-20: patched: Release of version 0.6.52
2026-06-23: advisory: GitHub Security Advisory published
2026-06-24: disclosed: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.