{"data":{"id":"df638cce-5428-45d4-83f5-7a4c40c72b7c","title":"CVE-2025-62616: AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that…","summary":"CVE-2025-62616 affects AutoGPT, a platform for creating and managing continuous AI agents, prior to autogpt-platform-beta-v0.6.34. In SendDiscordFileBlock, the input URL is passed to aiohttp.ClientSession().get without filtering, which enables a Server-Side Request Forgery (SSRF) flaw. GitHub, Inc. rates it CVSS 4.0 9.3 Critical, with network attack vector, low complexity, no privileges or user interaction, and high confidentiality and integrity impact.","solution":"This issue has been patched in autogpt-platform-beta-v0.6.34.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62616","publishedAt":"2026-02-04T23:15:55.500Z","cveId":"CVE-2025-62616","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AutoGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AutoGPT server-side request forgery in SendDiscordFileBlock via unfiltered URL","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00402,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:37.188Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}