CVE-2026-30950
HighSummary
AutoGPT, a workflow automation platform, is vulnerable to authenticated session hijacking via IDOR in versions 0.6.36 through 0.6.50. An attacker who knows another user's session_id can take over their session, allowing them to read messages and lock the legitimate user out.
Risk Assessment
Session hijacking can lead to the exposure of sensitive information and disruption of user operations, posing a serious threat to organizational security.
Recommendation
It is recommended to upgrade to version 0.6.51, which includes fixes for this vulnerability. Additionally, conducting a security audit of user sessions is advisable.
Original NVD description (English source)
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, they can take it over, reading any messages in it and locking the legitimate user out. The PATCH /sessions/{session_id}/assign-user endpoint authenticates the caller but never verifies session ownership: the service layer invokes the session lookup with user_id=None, which the data access layer interprets as a privileged/system call that bypasses the ownership filter, allowing any authenticated user to reassign an arbitrary session to themselves. This issue has been patched in version 0.6.51.