CVE-2026-33232: CWE-459: Incomplete Cleanup in Significant-Gravitas AutoGPT
AutoGPT versions 0.4.2 through 0.6.51 contain a vulnerability where the download_agent_file endpoint creates temporary files that are not deleted after use. This allows an unauthenticated attacker to repeatedly invoke this endpoint, causing uncontrolled disk space consumption. The resulting exhaustion of disk space can lead to failures in the database or other system services, causing a denial of service that renders the AutoGPT backend unavailable. The issue is fixed in version 0.6.52.
AI Analysis
Technical Summary
CVE-2026-33232 affects Significant-Gravitas AutoGPT versions 0.4.2 up to 0.6.51. The vulnerability arises from incomplete cleanup of temporary files created by the download_agent_file endpoint. Because these files persist and are not deleted after serving requests, an unauthenticated attacker can cause a denial of service by exhausting disk space on the server. This leads to failures in critical backend services due to "No space left on device" errors. The vulnerability is categorized under CWE-459 (Incomplete Cleanup), CWE-400 (Uncontrolled Resource Consumption), and CWE-770 (Allocation of Resources Without Limits or Throttling). A patch addressing this issue was released in version 0.6.52.
Potential Impact
The vulnerability allows unauthenticated attackers to cause a denial of service by exhausting the server's disk space through repeated requests to the vulnerable endpoint. This results in backend service failures, including database outages, making the AutoGPT platform unavailable to all users. There is no impact on confidentiality or integrity reported.
Mitigation Recommendations
Upgrade AutoGPT to version 0.6.52 or later, where this vulnerability has been patched. Until the upgrade is applied, consider implementing rate limiting or access controls on the download_agent_file endpoint to reduce the risk of disk space exhaustion. Patch status is confirmed by the vendor's release of version 0.6.52.
CVE-2026-33232: CWE-459: Incomplete Cleanup in Significant-Gravitas AutoGPT
Description
AutoGPT versions 0.4.2 through 0.6.51 contain a vulnerability where the download_agent_file endpoint creates temporary files that are not deleted after use. This allows an unauthenticated attacker to repeatedly invoke this endpoint, causing uncontrolled disk space consumption. The resulting exhaustion of disk space can lead to failures in the database or other system services, causing a denial of service that renders the AutoGPT backend unavailable. The issue is fixed in version 0.6.52.
CVSS v3.1
Score 7.5high
Affected software
pkg:github/significant-gravitas/AutoGPTRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-33232 affects Significant-Gravitas AutoGPT versions 0.4.2 up to 0.6.51. The vulnerability arises from incomplete cleanup of temporary files created by the download_agent_file endpoint. Because these files persist and are not deleted after serving requests, an unauthenticated attacker can cause a denial of service by exhausting disk space on the server. This leads to failures in critical backend services due to "No space left on device" errors. The vulnerability is categorized under CWE-459 (Incomplete Cleanup), CWE-400 (Uncontrolled Resource Consumption), and CWE-770 (Allocation of Resources Without Limits or Throttling). A patch addressing this issue was released in version 0.6.52.
Potential Impact
The vulnerability allows unauthenticated attackers to cause a denial of service by exhausting the server's disk space through repeated requests to the vulnerable endpoint. This results in backend service failures, including database outages, making the AutoGPT platform unavailable to all users. There is no impact on confidentiality or integrity reported.
Mitigation Recommendations
Upgrade AutoGPT to version 0.6.52 or later, where this vulnerability has been patched. Until the upgrade is applied, consider implementing rate limiting or access controls on the download_agent_file endpoint to reduce the risk of disk space exhaustion. Patch status is confirmed by the vendor's release of version 0.6.52.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-03-18T02:42:27.507Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a0bbb23ec166c07b029a35e
Added to database: 05/19/2026, 01:21:39 UTC
Last enriched: 05/26/2026, 08:26:34 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 113
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.