agpt vulnerabilities
CVEs whose affected-version data names the agpt package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-24780HighAutoGPT is Vulnerable to RCE via Disabled Block Execution
AutoGPT is Vulnerable to RCE via Disabled Block Execution
▾ Twilightagpt · agptEPSS 1.3%via OSV
CVE-2024-6091Critical· 9.8AutoGPT bypass of the shell commands denylist settings
AutoGPT bypass of the shell commands denylist settings
▾ Midnightagpt · agptEPSS 0.82%via OSV