Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai

CVE-2025-1040Server-Side Template Injection (SSTI) in significant-gravitas/autogpt

High 8.8

In plain English

A high-severity security flaw in significant-gravitas/autogpt from significant-gravitas. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).

Severity (CVSS 3.0)8.8High

Exploit odds (30 days)1.7%top 22.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). The vulnerability arises from the improper handling of user-supplied format strings in the `AgentOutputBlock` implementation, where malicious input is passed to the Jinja2 templating engine without adequate security measures. Attackers can exploit this flaw to execute arbitrary commands on the host system. The issue is fixed in version 0.4.0.

Affected products (as reported)

Vendor	Product	Versions
significant-gravitas	significant-gravitas/autogpt	unspecified – before v0.4.0

Weakness: CWE-1336 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References