CVE-2025-32423: AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractTextInformationBlock. Malicious users can amplify their input. For example, if a malicious user inputs 10K of content, the server will consume 50G of memory, eventually causing memory resources to be exhausted, resulting in DoS. This vulnerability is fixed in 0.6.32.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AutoGPTto a version that resolves this vulnerability.Fixed in 0.6.32
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32423?
The severity of CVE-2025-32423 is rated at 45, indicating a moderate risk of denial of service.
How do I fix CVE-2025-32423?
To resolve CVE-2025-32423, it is recommended to upgrade to AutoGPT version 0.6.32 or later.
What is the primary impact of CVE-2025-32423?
The primary impact of CVE-2025-32423 is a denial of service vulnerability that can be exploited by malicious users.
Which software is affected by CVE-2025-32423?
CVE-2025-32423 affects AutoGPT versions prior to 0.6.32.
How can malicious users exploit CVE-2025-32423?
Malicious users can exploit CVE-2025-32423 by inputting large amounts of content to amplify the attack, potentially causing service disruptions.