Skip to content
Heist/ feed
Back to feed
Medium

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

Type: advisorySources: OSV

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-32423
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 18:36 UTC · Revision 1

Source evidence

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

core-osv · Original source

Published 26 Jun 2026, 16:09 UTC

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

osv:CVE-2025-32423
Complete source record
{
  "id": "e886821af187b9789645e9966f1b74acb4172a45ea15c42aaabb742dde67e07a",
  "url": "https://osv.dev/vulnerability/CVE-2025-32423",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock",
    "summary": "AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.",
    "evidence": "osv:CVE-2025-32423",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-32423",
      "aliases": [
        "CVE-2025-32423",
        "GHSA-pppq-xx2w-7jpq"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/significant-gravitas/autogpt",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "73603a8ce54418bc4eba730429854bf072a65f7f"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.6.32"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.6.32"
                      }
                    ],
                    "source": "DESCRIPTION"
                  }
                ]
              }
            }
          ],
          "versions": [
            "autogpt-platform-beta-v0.6.31",
            "autogpt-platform-beta-v0.6.30",
            "autogpt-platform-beta-v0.6.29",
            "autogpt-platform-beta-v0.6.28",
            "autogpt-platform-beta-v0.6.26",
            "autogpt-platform-beta-v0.6.22",
            "autogpt-platform-beta-v0.6.21",
            "autogpt-platform-beta-v0.6.20",
            "autogpt-platform-beta-v0.6.19",
            "autogpt-platform-beta-v0.6.18",
            "autogpt-platform-beta-v0.6.17",
            "autogpt-platform-beta-v0.6.16",
            "autogpt-platform-beta-v0.6.15",
            "autogpt-platform-beta-v0.6.14",
            "autogpt-platform-beta-v0.6.13",
            "autogpt-platform-beta-v0.6.12",
            "autogpt-platform-beta-v0.6.11",
            "autogpt-platform-beta-v0.6.10",
            "autogpt-platform-beta-v0.6.9",
            "autogpt-platform-beta-v0.6.8",
            "autogpt-platform-beta-v0.6.7",
            "autogpt-platform-beta-v0.6.6",
            "autogpt-platform-beta-v0.6.5",
            "autogpt-platform-beta-v0.6.4",
            "autogpt-platform-beta-v0.6.2",
            "autogpt-platform-beta-v0.6.1",
            "autogpt-platform-beta-v0.6.0",
            "autogpt-platform-beta-v0.5.1",
            "autogpt-platform-beta-v0.5.0",
            "autogpt-platform-beta-v0.4.11",
            "autogpt-platform-beta-v0.4.10",
            "autogpt-platform-beta-v0.4.9",
            "autogpt-platform-beta-v0.4.8",
            "autogpt-platform-beta-v0.4.5",
            "autogpt-platform-beta-v0.4.4",
            "autogpt-platform-beta-v0.4.3",
            "autogpt-platform-beta-v0.4.2",
            "autogpt-platform-beta-v0.4.1",
            "autogpt-platform-beta-v0.4.0",
            "autogpt-platform-beta-v0.3.4",
            "autogpt-platform-beta-v0.3.3",
            "autogpt-platform-beta-v0.3.2",
            "autogpt-platform-beta-v0.2.2",
            "agpt-platform-beta-v0.2.0",
            "agpt-platform-beta-v0.1.1",
            "agpt-platform-beta-v0.1.0",
            "agbenchmark-v0.0.10",
            "v0.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32423.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:31.798449602Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32423.json",
        "https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-pppq-xx2w-7jpq",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-32423"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-770"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32423.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-32423",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 498518,
  "published_at": "2026-06-26T16:09:06.873+00:00"
}