CVE-2025-32424

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.63

Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The ScreenshotWebPageBlock function stores captured screenshots in a temporary directory without limiting the amount of disk space consumed in the current working directory. Additionally, the StepThroughItemsBlock function can be used to iterate ScreenshotWebPageBlock multiple times without a limit on the number of loops. A malicious user can exploit this by capturing numerous web pages, eventually exhausting disk space and causing a Denial of Service (DoS), which is a condition where a system becomes unavailable to its intended users.

Recommendations Update to version 0.6.63.