Skip to content
Heist/ feed
Back to feed
High

AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features

Type: advisorySources: OSV

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions prior to 0.6.52, the Fill Text Template block is vulnerable to a Denial of Service (DoS) attack. While the backend implements a SandboxedEnvironment to prevent unauthorized attribute access (e.g., blocking __class__), it fails to limit the computational complexity or execution time of the expressions. An attacker can input computationally expensive Python/Jinja2 expressions that consume the server's CPU and memory, leading to a complete system hang or crash. In multi-tenant or self-hosted environments, this results in a complete service outage and "noisy neighbor" effects that require manual administrative intervention to recover. This issue has been fixed in version 0.6.52.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-33235
Confirmed fixed CVEs
Not specified
Updated in this feed
8 Nov 2026, 01:44 UTC · Revision 1

Source evidence

AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features

core-osv · Original source

Published 24 Jun 2026, 20:52 UTC

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions prior to 0.6.52, the Fill Text Template block is vulnerable to a Denial of Service (DoS) attack. While the backend implements a SandboxedEnvironment to prevent unauthorized attribute access (e.g., blocking __class__), it fails to limit the computational complexity or execution time of the expressions. An attacker can input computationally expensive Python/Jinja2 expressions that consume the server's CPU and memory, leading to a complete system hang or crash. In multi-tenant or self-hosted environments, this results in a complete service outage and "noisy neighbor" effects that require manual administrative intervention to recover. This issue has been fixed in version 0.6.52.

osv:CVE-2026-33235
Complete source record
{
  "id": "d8ee1435272dacfe67c0619dc3f37daa5237bc3851ac9c8cb9adb04470856308",
  "url": "https://osv.dev/vulnerability/CVE-2026-33235",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "AutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features",
    "summary": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions prior to 0.6.52, the Fill Text Template block is vulnerable to a Denial of Service (DoS) attack. While the backend implements a SandboxedEnvironment to prevent unauthorized attribute access (e.g., blocking __class__), it fails to limit the computational complexity or execution time of the expressions. An attacker can input computationally expensive Python/Jinja2 expressions that consume the server's CPU and memory, leading to a complete system hang or crash. In multi-tenant or self-hosted environments, this results in a complete service outage and \"noisy neighbor\" effects that require manual administrative intervention to recover. This issue has been fixed in version 0.6.52.",
    "evidence": "osv:CVE-2026-33235",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-33235",
      "aliases": [
        "CVE-2026-33235",
        "GHSA-ppw9-h7rv-gwq9"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/significant-gravitas/autogpt",
              "type": "GIT",
              "events": [
                {
                  "introduced": "16b37fff1d65a7d998c39aeab9764973d76ea731"
                },
                {
                  "fixed": "f01f6686744e1913334641bd2242fc0ed2a1bbc6"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0.1.0"
                      },
                      {
                        "fixed": "0.6.52"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "fixed": "f01f6686744e1913334641bd2242fc0ed2a1bbc6"
                      }
                    ],
                    "source": "REFERENCES_TAG",
                    "original_tag": "autogpt-platform-beta-v0.6.52"
                  },
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.6.52"
                      }
                    ],
                    "source": "DESCRIPTION"
                  }
                ]
              }
            }
          ],
          "versions": [
            "autogpt-platform-beta-v0.6.50",
            "autogpt-platform-beta-v0.6.51",
            "autogpt-platform-beta-v0.6.49",
            "autogpt-platform-beta-v0.6.48",
            "autogpt-platform-beta-v0.6.47",
            "autogpt-platform-beta-v0.6.46",
            "autogpt-platform-beta-v0.6.43",
            "autogpt-platform-beta-v0.6.42",
            "autogpt-platform-beta-v0.6.41",
            "autogpt-platform-beta-v0.6.40",
            "autogpt-platform-beta-v0.6.39",
            "autogpt-platform-beta-v0.6.38",
            "autogpt-platform-beta-v0.6.37",
            "autogpt-platform-beta-v0.6.36",
            "autogpt-platform-beta-v0.6.35",
            "autogpt-platform-beta-v0.6.34",
            "autogpt-platform-beta-v0.6.33",
            "autogpt-platform-beta-v0.6.32",
            "autogpt-platform-beta-v0.6.31",
            "autogpt-platform-beta-v0.6.30",
            "autogpt-platform-beta-v0.6.29",
            "autogpt-platform-beta-v0.6.28",
            "autogpt-platform-beta-v0.6.26",
            "autogpt-platform-beta-v0.6.22",
            "autogpt-platform-beta-v0.6.21",
            "autogpt-platform-beta-v0.6.20",
            "autogpt-platform-beta-v0.6.19",
            "autogpt-platform-beta-v0.6.18",
            "autogpt-platform-beta-v0.6.17",
            "autogpt-platform-beta-v0.6.16",
            "autogpt-platform-beta-v0.6.15",
            "autogpt-platform-beta-v0.6.14",
            "autogpt-platform-beta-v0.6.13",
            "autogpt-platform-beta-v0.6.12",
            "autogpt-platform-beta-v0.6.11",
            "autogpt-platform-beta-v0.6.10",
            "autogpt-platform-beta-v0.6.9",
            "autogpt-platform-beta-v0.6.8",
            "autogpt-platform-beta-v0.6.7",
            "autogpt-platform-beta-v0.6.6",
            "autogpt-platform-beta-v0.6.5",
            "autogpt-platform-beta-v0.6.4",
            "autogpt-platform-beta-v0.6.2",
            "autogpt-platform-beta-v0.6.1",
            "autogpt-platform-beta-v0.6.0",
            "autogpt-platform-beta-v0.5.1",
            "autogpt-platform-beta-v0.5.0",
            "autogpt-platform-beta-v0.4.11",
            "autogpt-platform-beta-v0.4.10",
            "autogpt-platform-beta-v0.4.9",
            "autogpt-platform-beta-v0.4.8",
            "autogpt-platform-beta-v0.4.5",
            "autogpt-platform-beta-v0.4.4",
            "autogpt-platform-beta-v0.4.3",
            "autogpt-platform-beta-v0.4.2",
            "autogpt-platform-beta-v0.4.1",
            "autogpt-platform-beta-v0.4.0",
            "autogpt-platform-beta-v0.3.4",
            "autogpt-platform-beta-v0.3.3",
            "autogpt-platform-beta-v0.3.2",
            "autogpt-platform-beta-v0.2.2",
            "agpt-platform-beta-v0.2.0",
            "agpt-platform-beta-v0.1.1",
            "agpt-platform-beta-v0.1.0",
            "agbenchmark-v0.0.10",
            "v0.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33235.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:52.637131553Z",
      "provider": "osv",
      "references": [
        "https://github.com/Significant-Gravitas/AutoGPT/releases/tag/autogpt-platform-beta-v0.6.52",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33235.json",
        "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-ppw9-h7rv-gwq9",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-33235"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-400"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33235.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-33235",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 521463,
  "published_at": "2026-06-24T20:52:00.388+00:00"
}