CVE-2025-32436

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.63

Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The AddAudioToVideoBlock function downloads and stores video and audio files in a temporary directory without deleting them before all nodes complete. Additionally, this function does not limit the disk space consumed in the current working directory and fails to delete the video after outputting the result. Furthermore, the StepThroughItemsBlock function does not limit the number of loops and can be used to iterate MediaDurationBlock multiple times. These issues can be exploited by a malicious user to consume all available disk space, leading to a Denial of Service (DoS), which is a condition where a system becomes unavailable to its intended users.

Recommendations Update to version 0.6.63.