CVE-2025-41023

Publication date

2026-02-19 08:50:36

Family

INCIBE

State

PUBLISHED

Description

An authentication bypass vulnerability has been found in Thesamurs AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.