CVE-2026-56663: AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSRF / private-IP protections in SendWebRequestBlock and reach internal network services. isipblocked() in backend/backend/util/request.py does not normalize IPv4-mapped IPv6 addresses before checking resolved IPs against the blocked IPv4 ranges, and does not block special-use ranges such as 100.64.0.0/10 (CGNAT, RFC 6598). A hostname that resolves to an IPv4-mapped IPv6 address therefore passes validation and the request reaches the embedded internal IPv4 endpoint. This affects all AutoGPT Platform deployments. This vulnerability is fixed in 0.6.52.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AutoGPT Platformto a version that resolves this vulnerability.Fixed in 0.6.52 - Configuration
Ensure _is_ip_blocked() normalizes IPv4-mapped IPv6 addresses prior to comparing resolved IPs to the blocked IPv4 ranges, and that the blocked ranges include special-use networks such as 100.64.0.0/10 (CGNAT, RFC 6598).
AutoGPT backend/backend/util/request.py (SendWebRequestBlock / _is_ip_blocked) IP validation must normalize IPv4-mapped IPv6 addresses before checking resolved IPs against blocked IPv4 ranges, and must block special-use ranges such as 100.64.0.0/10 (CGNAT, RFC 6598) = normalize IPv4-mapped IPv6 before range checks; block 100.64.0.0/10
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56663?
The severity of CVE-2026-56663 is rated as high with a score of 8.5.
How do I fix CVE-2026-56663?
To fix CVE-2026-56663, upgrade to AutoGPT version 0.6.52 or later.
What is the risk associated with CVE-2026-56663?
CVE-2026-56663 poses a risk level of 73, indicating significant potential impact.
What type of vulnerability is CVE-2026-56663?
CVE-2026-56663 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
What can an attacker achieve with CVE-2026-56663?
An attacker can exploit CVE-2026-56663 to bypass IP validation and access internal network services.