CVE-2026-65699

Name of the Vulnerable Software and Affected Versions AgentGPT versions prior to 1.0.1

Description An authorization bypass exists that allows authenticated users to attach tasks to another user's agent run. This occurs because the AgentCRUD.create task and validate task count functions use a client-supplied run id in the request body to look up the target AgentRun without verifying if the requesting user owns that run. An attacker with a valid run id can corrupt task history, exhaust the per-run loop budget, and increase LLM costs for the victim.

Recommendations Update AgentGPT to version 1.0.1 or later.