AVID-2026-R1401

Description

CSRF to RCE in significant-gravitas/autogpt (CVE-2024-1879)

Details

A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. The vulnerability stems from the lack of protections on the API endpoint receiving instructions, enabling an attacker to direct a user running AutoGPT in their local network to a malicious website. This site can then send crafted requests to the AutoGPT server, leading to command execution. The issue is exacerbated by CORS being enabled for arbitrary origins by default, allowing the attacker to read the response of all cross-site queries. This vulnerability was addressed in version 5.1.

Reason for inclusion in AVID: CVE-2024-1879 describes a CSRF-to-RCE vulnerability in significant-gravitas/autogpt (AutoGPT server) enabling arbitrary command execution via crafted requests; this is a software vulnerability in an AI tooling component used in AI systems, affecting deployment/run-time of AI agents, i.e., a general-purpose AI supply-chain component. Evidence includes CVE entry, CVSS data, and description.

References

Affected or Relevant Artifacts

Developer: OpenAI
Deployer: OpenAI
Artifact Details:

Type	Name
System	significant-gravitas/autogpt

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.0
Vector String	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score	8.8
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	REQUIRED
Scope	UNCHANGED
Confidentiality Impact	🔴 High
Integrity Impact	🔴 High
Availability Impact	🔴 High

CWE

ID	Description
CWE-352	CWE-352 Cross-Site Request Forgery (CSRF)

Other information

Report Type: Advisory
Credits:
Date Reported: 2024-06-06
Version: 0.3.3
AVID Entry