CVE-2025-32394: AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSummarizerBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AutoGPTto a version that resolves this vulnerability.Fixed in 0.6.32
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32394?
The severity of CVE-2025-32394 is rated at 45, indicating a moderate risk associated with the DoS vulnerability.
How do I fix CVE-2025-32394?
To fix CVE-2025-32394, upgrade AutoGPT to version 0.6.32 or later, which addresses the DoS vulnerability in AITextSummarizerBlock.
What type of vulnerability is CVE-2025-32394?
CVE-2025-32394 is classified as a Denial of Service (DoS) vulnerability that affects the AITextSummarizerBlock in AutoGPT.
Can CVE-2025-32394 be exploited by users?
Yes, CVE-2025-32394 can be exploited by malicious users to amplify their input, leading to potential service disruptions.
Which software is affected by CVE-2025-32394?
CVE-2025-32394 affects the AutoGPT software, specifically prior to version 0.6.32.