CVE-2025-32394
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk16th percentile — higher than 16% of all known CVEs
Summary
In AutoGPT before version 0.6.32, there is a DoS vulnerability in the AITextSummarizerBlock. A malicious user can send 10 KB of content, causing the server to consume 50 GB of memory, leading to resource exhaustion and denial of service.
Risk Assessment
An attacker can easily overload the server, causing the platform to become unavailable to other users and potentially leading to financial losses.
Recommendation
Immediately update AutoGPT to version 0.6.32 or later, which contains a fix for this vulnerability.
Original NVD description (English source)
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.