MEDIUM

CVE-2026-56823

2026-06-26 CVSS v3.1
CVSS
5.4

Description

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the `POST /api/integrations/webhooks/{webhook_id}/ping` endpoint fetches the target webhook by primary key alone without verifying that the webhook belongs to the authenticated user. Any authenticated user can supply an arbitrary webhook_id to confirm webhook existence, leak the webhook's OAuth provider type, and in some cases trigger a ping delivery on behalf of another user. This vulnerability is fixed in .

Summary dbcve.org

AutoGPT's `POST /api/integrations/webhooks/{webhook_id}/ping` endpoint suffers from an Insecure Direct Object Reference (IDOR) vulnerability where webhook lookup occurs by primary key without verifying ownership by the authenticated user. This allows any authenticated user to confirm webhook existence, disclose the OAuth provider type, and potentially trigger ping delivery on behalf of another user.

Mitigation

Implement authorization checks to verify the authenticated user owns the specified webhook before returning any data or executing the ping action. Use session-based user context to validate ownership against the webhook record.

Weakness (CWE)

CWE-284 Improper Access Control
CWE-639 Authorization Bypass (IDOR)

EPSS Score

0.25%
Probability of exploitation in next 30 days
16.7th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE