AutoGPT — Dos (CVE-2025-32394)
Date: 2026-06
Attack vector: dos
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-32394
CWE: CWE-405
CWE-770

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.


Mitigations:

Architectural layers (MAESTRO):