CVE-2025-32394

MEDIUM

AutoGPT < 0.6.32 AITextSummarizerBlock - Memory Exhaustion Denial of Service

Title source: manual
STIX 2.1

Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.

References (1)

Core 1
Core References

Scores

CVSS v4 5.3
EPSS 0.0025
EPSS Percentile 16.1%
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-405 CWE-770
Status published
Products (1)
Significant-Gravitas/AutoGPT < 0.6.32
Published Jun 26, 2026
Tracked Since Jun 26, 2026