CVE-2024-10457 SSRF Vulnerabilities in significant-gravitas/autogpt
Attackers can exploit SSRF in GitHub and web search blocks to leak credentials and access internal services via untrusted inputs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10457?
CVE-2024-10457 is a medium-severity server-side request forgery vulnerability in significant-gravitas/autogpt, published on 20 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple Server-Side Request Forgery (SSRF) vulnerabilities were identified in the significant-gravitas/autogpt repository, specifically in the GitHub Integration and Web Search blocks. These vulnerabilities affect version agpt-platform-beta-v0.1.1. The issues arise when block inputs are controlled by untrusted sources, leading to potential credential leakage, internal network scanning, and unauthorized access to internal services, APIs, or data stores. The affected blocks include GithubListPullRequestsBlock, GithubReadPullRequestBlock, GithubAssignPRReviewerBlock, GithubListPRReviewersBlock, GithubUnassignPRReviewerBlock, GithubCommentBlock, GithubMakeIssueBlock, GithubReadIssueBlock, GithubListIssuesBlock, GithubAddLabelBlock, GithubRemoveLabelBlock, GithubListBranchesBlock, and ExtractWebsiteContentBlock.
Weakness: CWE-918
Which versions are affected by CVE-2024-10457?
How do I fix CVE-2024-10457?
No fix has been published for CVE-2024-10457 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-10457 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-10457 exists.
Sources
Also known as GHSA-64jp-4xjj-prcw.