CVE-2025-32392 - CVE House
Back to Database
Status published High CVE-2025-32392

AutoGPT has a DoS vulnerability in LoopVideoBlock

Vulnerability Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to input a video file and process the video, such as looping it 5 times or extending the time, and finally writing it to disk. However, there is no limit on the resources that can be allocated during execution. For example, the number of loops is user-controllable and unlimited. When a malicious attacker loops too many times, the generated video is too large, and after writing it to disk, the disk space is exhausted, eventually causing DoS. Version 0.6.63 patches the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32392

Credits & Attribution

No credits recorded in the NVD database.

References

More from Significant-Gravitas

View All →
CVE-2025-62616
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
Critical 9.3
CVE-2025-62615
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
Critical 9.3
CVE-2025-53944
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
High 7.7
CVE-2025-32437
AutoGPT has a DoS vulnerability in MediaDurationBlock
High 8.7
CVE-2025-32436
AutoGPT has a DoS vulnerability in AddAudioToVideoBlock
High 7.1

Affected Vendor

Significant-Gravitas

View all reports →

Affected Software

AutoGPT
Vulnerable Versions:
< 0.6.63

Timeline

Official Publish: June 18th, 2026
Last Modified: June 18th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact