{"data":{"id":"a8ff901f-4e10-473d-89fc-34f612e92d91","title":"CVE-2025-32394: AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence…","summary":"CVE-2025-32394 is a denial-of-service vulnerability in AutoGPT, a workflow automation platform for creating, deploying, and managing continuous AI agents, in versions prior to 0.6.32. The flaw is in AITextSummarizerBlock, where a malicious user can amplify input size, so a 10K input can make the server consume 50G of memory and exhaust memory resources. GitHub, Inc. is the CNA, rating it CVSS 4.0 5.3 MEDIUM.","solution":"Fixed in 0.6.32.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-32394","publishedAt":"2026-06-26T17:16:31.413Z","cveId":"CVE-2025-32394","cweIds":["CWE-405","CWE-770"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AutoGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AutoGPT denial of service through AITextSummarizerBlock input amplification","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00382,"epssCheckedAt":"2026-11-10T00:11:22.175Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T00:11:40.377Z","patchAvailable":null,"disclosureDate":"2026-06-26T17:16:31.413Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}