CVE-2026-33235

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.52

Description The Fill Text Template block is susceptible to a Denial of Service (DoS) attack. Although the backend utilizes a SandboxedEnvironment to block unauthorized attribute access, such as class, it does not restrict the execution time or computational complexity of expressions. An attacker can provide resource-intensive Python/Jinja2 expressions that exhaust server CPU and memory, causing the system to hang or crash. In self-hosted or multi-tenant environments, this leads to a complete service outage and noisy neighbor effects, where one user's activity degrades performance for others, necessitating manual administrative recovery.

Recommendations Update to version 0.6.52.