CVE-2025-1040: Server-Side Template Injection (SSTI) in significant-gravitas/autogpt
AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). The vulnerability arises from the improper handling of user-supplied format strings in the AgentOutputBlock implementation, where malicious input is passed to the Jinja2 templating engine without adequate security measures. Attackers can exploit this flaw to execute arbitrary commands on the host system. The issue is fixed in version 0.4.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1040?
CVE-2025-1040 has a critical severity rating due to its potential to allow Remote Code Execution.
How do I fix CVE-2025-1040?
To fix CVE-2025-1040, upgrade AutoGPT to version 0.4.0 or later.
What causes the vulnerability in CVE-2025-1040?
CVE-2025-1040 is caused by improper handling of user-supplied format strings in the AgentOutputBlock implementation.
Which versions of AutoGPT are affected by CVE-2025-1040?
AutoGPT versions 0.3.4 and earlier are affected by CVE-2025-1040.
What impact does CVE-2025-1040 have on security?
CVE-2025-1040 can lead to Remote Code Execution, compromising the security of affected systems.