CVE-2026-56663

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.52

Description An authenticated user can bypass Server-Side Request Forgery (SSRF) and private-IP protections within the SendWebRequestBlock to access internal network services. The issue occurs because the is ip blocked() function in backend/backend/util/request.py fails to normalize IPv4-mapped IPv6 addresses before comparing resolved IPs against blocked IPv4 ranges. Additionally, it does not block special-use ranges such as 100.64.0.0/10 (Carrier-Grade NAT, a mechanism allowing service providers to share a single public IPv4 address among multiple customers). Consequently, a hostname resolving to an IPv4-mapped IPv6 address can bypass validation and reach internal IPv4 endpoints.

Recommendations Update to version 0.6.52.