CVE-2025-32424 - CVE House
Back to Database
Status published High CVE-2025-32424

AutoGPT has a DoS vulnerability in ScreenshotWebPageBlock

Vulnerability Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, ScreenshotWebPageBlock will store the captured screenshots in a temporary directory. `StepThroughItemsBlock` can be used to iterate `ScreenshotWebPageBlock` multiple times. `StepThroughItemsBlock` does not limit the number of loops. In addition, `ScreenshotWebPageBlock` does not limit the amount of disk space consumed in the current working directory. When a malicious user chooses to screen shot many web pages, the disk space will eventually run out, causing a DoS. Version 0.6.63 patches the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32424

Credits & Attribution

No credits recorded in the NVD database.

References

More from Significant-Gravitas

View All →
CVE-2025-62616
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
Critical 9.3
CVE-2025-62615
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
Critical 9.3
CVE-2025-53944
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
High 7.7
CVE-2025-32437
AutoGPT has a DoS vulnerability in MediaDurationBlock
High 8.7
CVE-2025-32436
AutoGPT has a DoS vulnerability in AddAudioToVideoBlock
High 7.1

Affected Vendor

Significant-Gravitas

View all reports →

Affected Software

AutoGPT
Vulnerable Versions:
< 0.6.63

Timeline

Official Publish: June 18th, 2026
Last Modified: June 18th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact