CVE-2025-32393

Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.32

Description AutoGPT is a platform for creating and managing AI agents that automate workflows. A denial-of-service condition exists in the ReadRSSFeedBlock component due to uncontrolled resource allocation during XML parsing with feedparser.parser. A malicious user can provide a specially crafted, deeply nested XML file via a URL, leading to excessive memory consumption and ultimately a denial-of-service. The vulnerable component calls feedparser.parser to obtain and parse XML files based on user-provided URLs. There is no limit on parsing time or resource allocation during this process.

Recommendations Update to version 0.6.32 or later.