CVE-2026-56823
Description
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the `POST /api/integrations/webhooks/{webhook_id}/ping` endpoint fetches the target webhook by primary key alone without verifying that the webhook belongs to the authenticated user. Any authenticated user can supply an arbitrary webhook_id to confirm webhook existence, leak the webhook's OAuth provider type, and in some cases trigger a ping delivery on behalf of another user. This vulnerability is fixed in .
Summary dbcve.org
AutoGPT's `POST /api/integrations/webhooks/{webhook_id}/ping` endpoint suffers from an Insecure Direct Object Reference (IDOR) vulnerability where webhook lookup occurs by primary key without verifying ownership by the authenticated user. This allows any authenticated user to confirm webhook existence, disclose the OAuth provider type, and potentially trigger ping delivery on behalf of another user.
Mitigation
Implement authorization checks to verify the authenticated user owns the specified webhook before returning any data or executing the ping action. Use session-based user context to validate ownership against the webhook record.