CVE-2026-45023

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.59

Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The 'POST /api/blocks/{block id}/execute' endpoint allows the execution of blocks without consuming credits, regardless of the user's balance. This occurs because the credit check located in the graph execution path within manager.py is bypassed when blocks are called directly via the external API, enabling unlimited free execution of all blocks.

Recommendations Update to version 0.6.59.