CVE-2025-41023: Thesamur Autogpt

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.

Affected products

• Thesamur Autogpt: any version

Published 2026-02-19. Last modified 2026-06-17.